Overview

overview

7

Static

static

6

fcf62155f6...18.apk

android-9-x86

1

BannerPlugin-3.1.apk

android-9-x86

1

BannerPlugin-3.1.apk

android-10-x64

1

BannerPlugin-3.1.apk

android-11-x64

1

CommonPlugin-4.7.apk

android-9-x86

1

CommonPlugin-4.7.apk

android-10-x64

1

CommonPlugin-4.7.apk

android-11-x64

1

FeedPlugin-2.9.apk

android-9-x86

1

FeedPlugin-2.9.apk

android-10-x64

1

FeedPlugin-2.9.apk

android-11-x64

1

FrameworkP....4.apk

android-9-x86

1

FrameworkP....4.apk

android-10-x64

1

FrameworkP....4.apk

android-11-x64

1

InsertPlugin-2.9.apk

android-9-x86

1

InsertPlugin-2.9.apk

android-10-x64

1

InsertPlugin-2.9.apk

android-11-x64

1

TAEPlugin-2.1.apk

android-9-x86

6

TAEPlugin-2.1.apk

android-11-x64

7

WelcomePlugin-3.3.apk

android-9-x86

1

WelcomePlugin-3.3.apk

android-10-x64

1

WelcomePlugin-3.3.apk

android-11-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    fcf62155f60c110941fc3f44ec25d410_JaffaCakes118

  • Size

    24.9MB

  • MD5

    fcf62155f60c110941fc3f44ec25d410

  • SHA1

    e53a3f6da3c5b3b8c99ddd02a0377e4b540741d9

  • SHA256

    e1e3939da0eee19d293efee9ccc8e4508a52fd9ee0bf4c5078715cdb5afbc788

  • SHA512

    0014703a1267762e07136c4619409f4f6caa8503c897c828aeb67c72017218af23deae8b341f6333b6096a4fce656e791fb9a722e548411f3604bac99482e8af

  • SSDEEP

    393216:A93wONmHb11+nOkCXySornLWsK5vZ0rUjLlTRE/uLFXeJL1t9U6WjDs6P+CN1YO:Lf71uOkCCSornUNZyipTGMXkfFj6vYO

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 8 IoCs

Files

  • fcf62155f60c110941fc3f44ec25d410_JaffaCakes118
    .apk android arch:arm

    com.wedobest.hbq

    .StartAct


  • BannerPlugin-3.1.apk
    .apk android

    com.alimama.mobile.sdk.banner

    com.alimama.mobile.plugin.banner.service.MainActivity


  • CommonPlugin-4.7.apk
    .apk android

    com.taobao.munion.plugin.cm

    com.taobao.test.MainActivity


  • FeedPlugin-2.9.apk
    .apk android

    com.alimama.mobile.sdk.feed

    com.taobao.test.FeedMainActivity


  • FrameworkPlugin-3.4.apk
    .apk android

    com.taobao.munion.plugin.framework


  • InsertPlugin-2.9.apk
    .apk android

    com.alimama.mobile.sdk.insert


  • TAEPlugin-2.1.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.alimama.mobile.sdk.tae

    com.ali.auth.third.ui.webview.BaseWebViewActivity


  • WelcomePlugin-3.3.apk
    .apk android

    com.alimama.mobile.sdk.welcome


Android Permissions

fcf62155f60c110941fc3f44ec25d410_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.CHANGE_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.GET_TASKS

android.permission.ACCESS_FINE_LOCATION

android.permission.CHANGE_CONFIGURATION

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_LOGS

android.permission.CALL_PHONE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.VIBRATE

android.permission.GET_TASKS

android.permission.BLUETOOTH

android.permission.READ_SETTINGS