Overview

overview

6

Static

static

6

ec0539a9a6...18.apk

android-9-x86

6

alipay_plu...sp.apk

android-9-x86

1

alipay_plu...sp.apk

android-10-x64

1

alipay_plu...sp.apk

android-11-x64

1

lijian.apk

android-9-x86

4

lijian.apk

android-10-x64

6

lijian.apk

android-11-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    ec0539a9a64214740d052d4898947ab5_JaffaCakes118

  • Size

    3.4MB

  • MD5

    ec0539a9a64214740d052d4898947ab5

  • SHA1

    d5ecb351530abe1bc7bb33cad526a82d1ec0d980

  • SHA256

    3a3d1ddcac92eb5c55fe472ea5c048c4e359fecdf36ebee874bc9f787b5c2f42

  • SHA512

    6a0ed33e414b4fbf22421d31a40dd3ef8d9459ddb66a945aa31a80c1d65aa6860a2646494e086e23aef8777fe15df2d107aa8bcf36d76aca725417b5ff4bfaff

  • SSDEEP

    98304:qcVViQsgyS14zVThdKSfYJyiKui0Uz1V8/h+hDMxSc1/URozCy:RVVYJvYJd9wWh+hDMSImy

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 7 IoCs

Files

  • ec0539a9a64214740d052d4898947ab5_JaffaCakes118
    .apk android arch:arm

    com.biz_package268

    .ui.LoadingActivity


  • alipay_plugin_20120428msp.apk
    .apk android

    com.alipay.android.app

    .Cashier


  • lijian.apk
    .apk android

    net.air_id.android.SAC_RESOLVE

    .actMain


Android Permissions

ec0539a9a64214740d052d4898947ab5_JaffaCakes118

Permissions

android.permission.READ_LOGS

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.CALL_PHONE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_MOCK_LOCATION

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN