Overview

overview

6

Static

static

6

f5d56265d8...18.apk

android-9-x86

1

f5d56265d8...18.apk

android-11-x64

1

PayPlugin.apk

android-9-x86

1

PayPlugin.apk

android-10-x64

1

PayPlugin.apk

android-11-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    f5d56265d8c6bda74edc84eba54898f6_JaffaCakes118

  • Size

    2.4MB

  • MD5

    f5d56265d8c6bda74edc84eba54898f6

  • SHA1

    40d2a7f0821aa8932487871e3659efe4d6a4acf5

  • SHA256

    a285449429a38ac2b2a661bb640724479aeaea145cd73d083ae130e2361a2415

  • SHA512

    2891972fee056034acc3f02b6c4039855662fb32bddfc4f8699e7a5a1640fb969af9b4bae3e0cdaca0b837a567b4387d39a749b2fe00f5aa7f388b709f497229

  • SSDEEP

    49152:mbQHaSC5JqSZ4T1jfavguf2ucJ7Mc/XyEUALDFEBZinmm2qd8Fz3fHrI:mbQHaSj2q1Davyuk7McKqLpEKYfz3f0

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 7 IoCs

Files

  • f5d56265d8c6bda74edc84eba54898f6_JaffaCakes118
    .apk android arch:arm arch:x86

    com.pldatech.qianghongbao

    com.qihoo.util.StartActivity


  • PayPlugin.jt
    .apk android

    com.pay.sdk

    com.pay.sdk.WXPayActivity


Android Permissions

f5d56265d8c6bda74edc84eba54898f6_JaffaCakes118

Permissions

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.WRITE_SETTINGS

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_PHONE_STATE

android.permission.DISABLE_KEYGUARD

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.BIND_ACCESSIBILITY_SERVICE

android.permission.WRITE_EXTERNAL_STORAGE

android.webkit.permission.PLUGIN

android.permission.READ_EXTERNAL_STORAGE

android.permission.VIBRATE