de500a979e2c4c008329843837cc3b3e_JaffaCakes118

General

Target

de500a979e2c4c008329843837cc3b3e_JaffaCakes118
Size

6.5MB
MD5

de500a979e2c4c008329843837cc3b3e
SHA1

453be62329f88ec1d3a289d7b1b6840da78f2b3f
SHA256

02f7b6185139dfd2557567cbc53e007b91a052f069122aa983c615a64d93d9a7
SHA512

5fbcdbea0425d198e1e2cc880fcb6e559cfed0cd32a8f8ea627f53edb90732103a81f386844d14008d760cd8061f128e81f309a4e81f090a0c153f24a754ab2d
SSDEEP

196608:hkfBCXfbZXmQkj2/q6VZ9OeOQ6KeuiH7aCL5ixKVU:JTIX6ICsPaW5i1

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO

Files

de500a979e2c4c008329843837cc3b3e_JaffaCakes118
.apk android arch:arm arch:mips arch:x86

com.alphaman.date

com.example.lovetearcher.ui.LoadingActivity

Activities

com.example.lovetearcher.ui.LoadingActivity

android.intent.action.MAIN

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.appkefu.lib.ui.activity.KFWebBrowserActivity

android.intent.action.VIEW

Permissions

android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WAKE_LOCK
android.permission.VIBRATE
android.permission.WRITE_SETTINGS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.GET_TASKS
android.permission.REORDER_TASKS
android.permission.CAMERA
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.INTERNET
android.permission.VIBRATE
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.RECORD_AUDIO
android.permission.READ_LOGS
android.permission.WAKE_LOCK
android.permission.GET_TASKS
android.permission.CHANGE_CONFIGURATION
android.permission.USE_CREDENTIALS

Receivers

com.umeng.message.RegistrationReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_REMOVED
android.intent.action.BOOT_COMPLETED

com.umeng.message.UmengBroadcastReceiver

org.agoo.android.intent.action.RECEIVE
com.alphaman.date.intent.action.COMMAND
org.agoo.android.intent.action.RE_ELECTION_V2

com.appkefu.lib.receivers.KFNetworkConnectivityReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.appkefu.lib.receivers.KFBootReceiver

android.intent.action.BOOT_COMPLETED

com.appkefu.lib.receivers.KFPowerReceiver

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

com.appkefu.lib.receivers.KFMessageReceiver

com.appkefu.lib.action.XMPP.MESSAGE_RECEIVED

Services

com.umeng.message.UmengService

com.alphaman.date.intent.action.START
com.alphaman.date.intent.action.COCKROACH
org.agoo.android.intent.action.PING

org.android.agoo.service.ElectionService

org.agoo.android.intent.action.ELECTION_V2

com.appkefu.lib.service.KFMainService

com.appkefu.lib.action.CONNECT
com.appkefu.lib.action.DISCONNECT
com.appkefu.lib.action.TOGGLE
com.appkefu.lib.action.SEND
com.appkefu.lib.action.NETWORK_STATUS_CHANGED
com.appkefu.lib.action.XMPP.MESSAGE_RECEIVED

com.appkefu.OpenUDID.OpenUDID_service

org.openudid.GETUDID

Android Permissions

de500a979e2c4c008329843837cc3b3e_JaffaCakes118

Permissions

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.WRITE_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.GET_TASKS

android.permission.REORDER_TASKS

android.permission.CAMERA

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.INTERNET

android.permission.VIBRATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.RECORD_AUDIO

android.permission.READ_LOGS

android.permission.WAKE_LOCK

android.permission.GET_TASKS

android.permission.CHANGE_CONFIGURATION

android.permission.USE_CREDENTIALS

Sharing

General

Malware Config

Signatures

Files

com.alphaman.date

com.example.lovetearcher.ui.LoadingActivity

Activities

com.example.lovetearcher.ui.LoadingActivity

com.tencent.tauth.AuthActivity

com.appkefu.lib.ui.activity.KFWebBrowserActivity

Permissions

Receivers

com.umeng.message.RegistrationReceiver

com.umeng.message.UmengBroadcastReceiver

com.appkefu.lib.receivers.KFNetworkConnectivityReceiver

com.appkefu.lib.receivers.KFBootReceiver

com.appkefu.lib.receivers.KFPowerReceiver

com.appkefu.lib.receivers.KFMessageReceiver

Services

com.umeng.message.UmengService

org.android.agoo.service.ElectionService

com.appkefu.lib.service.KFMainService

com.appkefu.OpenUDID.OpenUDID_service

Android Permissions

de500a979e2c4c008329843837cc3b3e_JaffaCakes118