d6be19bd15b472d48cbd5fef8f10a2a2_JaffaCakes118

General

Target

d6be19bd15b472d48cbd5fef8f10a2a2_JaffaCakes118
Size

22.9MB
MD5

d6be19bd15b472d48cbd5fef8f10a2a2
SHA1

ff56a00db5f5d3aa76f17b9d9df1ca5ebcc038ba
SHA256

332d3e6f525af9f1e2ea4b5cb08927b24a3d6b981fec7adb0d4943c418145646
SHA512

ceb43e91aceee1945e6fdbb3fa14397be25aa2728f0333fb7ca437816faac36fa345bc149fbeda8e5d8a729866ebbca673fb1adcabc70366a311d36ee2d0406f
SSDEEP

393216:HQcaxz4yaLoliN8hyToOJEpr5NzwaUPdv4cG1a4t41noYbagli53u7oUIpQr:H+z4yaLoliN8wTNElOQnRt41rayF7epg

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS

Files

d6be19bd15b472d48cbd5fef8f10a2a2_JaffaCakes118
.apk android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

com.Txunda.taomi

com.qihoo.util.StartActivity

Activities

com.mob.tools.MobUIShell

android.intent.action.VIEW
com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.Txunda.taomi.SplashAty

android.intent.action.MAIN
android.intent.action.VIEW

com.qihoo.util.StartActivity

android.intent.action.MAIN

Permissions

android.permission.VIBRATE
android.permission.READ_PHONE_STATE
android.permission.CALL_PHONE
android.permission.CAMERA
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CHANGE_CONFIGURATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.WAKE_LOCK
android.permission.WRITE_SETTINGS
android.permission.GET_TASKS
android.permission.WRITE_SETTINGS
android.permission.MANAGE_ACCOUNTS
android.permission.READ_PHONE_STATE
android.permission.CHANGE_WIFI_MULTICAST_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECORD_AUDIO
android.permission.ACCESS_FINE_LOCATION
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.GET_ACCOUNTS
android.permission.CHANGE_NETWORK_STATE
org.simalliance.openmobileapi.SMARTCARD
android.permission.NFC

Receivers

net.sourceforge.simcpux.AppRegister

com.tencent.mm.plugin.openapi.Intent.ACTION_REFRESH_WXAPP

com.hyphenate.chat.EMMonitorReceiver

android.intent.action.PACKAGE_REMOVED

Services

Android Permissions

d6be19bd15b472d48cbd5fef8f10a2a2_JaffaCakes118

Permissions

android.permission.VIBRATE

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.CAMERA

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CHANGE_CONFIGURATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.GET_TASKS

android.permission.WRITE_SETTINGS

android.permission.MANAGE_ACCOUNTS

android.permission.READ_PHONE_STATE

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECORD_AUDIO

android.permission.ACCESS_FINE_LOCATION

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.GET_ACCOUNTS

android.permission.CHANGE_NETWORK_STATE

org.simalliance.openmobileapi.SMARTCARD

android.permission.NFC

Sharing

General

Malware Config

Signatures

Files

com.Txunda.taomi

com.qihoo.util.StartActivity

Activities

com.mob.tools.MobUIShell

com.Txunda.taomi.SplashAty

com.qihoo.util.StartActivity

Permissions

Receivers

net.sourceforge.simcpux.AppRegister

com.hyphenate.chat.EMMonitorReceiver

Services

Android Permissions

d6be19bd15b472d48cbd5fef8f10a2a2_JaffaCakes118