fed9de3cc45aa06a6d7ccaf727c9a237_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fed9de3cc45aa06a6d7ccaf727c9a237_JaffaCakes118
Size

12.5MB
MD5

fed9de3cc45aa06a6d7ccaf727c9a237
SHA1

8c798e0140f96f618e9a4890de2858af7d66e5fa
SHA256

f8fc83c7848d72433d677d1396722f68e40cfe1fff6600b2f02cec9f866fd306
SHA512

e2d7530224f135b4012863f028f3df1813465915c2a164ec8c41186f68d4c8f6e313456fb32f9adbd587c9ea7ed5172667355f407d34337e7ef87f0d73f6f27c
SSDEEP

393216:oyW4MczVuZ6QTQtiWTp6FDO2a9+19zJw065:oXz36QKNp6llBro

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Requests dangerous framework permissions 13 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS

Files

fed9de3cc45aa06a6d7ccaf727c9a237_JaffaCakes118
.apk android arch:arm64 arch:arm arch:x86 arch:x64

com.netqin.ps

com.netqin.ps.privacy.HideActivity

Activities

com.netqin.ps.privacy.HideActivity

android.intent.action.MAIN

com.netqin.ps.plugin.PlugInActivity

android.netqin.action.PLUGINTEST

com.netqin.debug.FileManagerActivity

android.netqin.action.PSFILENAMAGER

com.netqin.debug.ChangeIM

android.netqin.action.ChangeIM

com.netqin.debug.NewChangeIM

android.netqin.action.NewChangeIM

com.netqin.ps.ui.communication.PrivacyCommunicationActivity

com.need.picoo.sms.support

com.netqin.ps.privacy.ShareActivity

android.intent.action.SEND_MULTIPLE
android.intent.action.SEND
android.intent.action.SEND

com.netqin.ps.ui.communication.PrivacyConversation

android.intent.action.SENDTO

com.netqin.ps.ui.keyboard.KeyBoard

com.netqin.ps.enter

com.netqin.ps.passwordsaver.FindPwdActivity

android.intent.action.VIEW

com.netqin.ps.camera.CameraShortCutActivity

android.netqin.action.CameraShortCut
android.intent.action.MAIN

Permissions

com.android.vending.BILLING
android.permission.CAMERA
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.GET_ACCOUNTS
android.permission.ACCESS_COARSE_LOCATION
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.CALL_PHONE
android.permission.INTERNET
android.permission.GET_TASKS
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_APN_SETTINGS
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.READ_SETTINGS
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.WAKE_LOCK
android.permission.VIBRATE
android.permission.DISABLE_KEYGUARD
android.permission.RESTART_PACKAGES
com.android.launcher.permission.UNINSTALL_SHORTCUT
android.permission.WRITE_SETTINGS
com.android.launcher.permission.WRITE_SETTINGS
android.permission.READ_LOGS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.WRITE_MEDIA_STORAGE
com.android.browser.permission.READ_HISTORY_BOOKMARKS
android.permission.UPDATE_APP_OPS_STATS
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_NOTIFICATION_POLICY
com.android.launcher2.permission.INSTALL_SHORTCUT
android.permission.PACKAGE_USAGE_STATS
android.permission.USE_FINGERPRINT
com.netqin.ps.PAYMENT_BROADCAST_PERMISSION
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.CHANGE_NETWORK_STATE
com.google.android.providers.gsf.permission.READ_GSERVICES
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.google.android.c2dm.permission.RECEIVE
com.netqin.ps.permission.C2D_MESSAGE

Receivers

com.netqin.widget.PsWidget

android.appwidget.action.APPWIDGET_UPDATE
com.netqin.sms

com.netqin.ps.receiver.SmsReceiver

android.provider.Telephony.SMS_RECEIVED

com.netqin.logmanager.MyReceiver

com.netqin.ps.ELITOR_CLOCK

com.netqin.ps.receiver.SmsStatusReceiver

com.netqin.im.sms

com.netqin.ps.receiver.BootReceiver

android.intent.action.BOOT_COMPLETED

com.netqin.ps.receiver.UrlReceiver

com.netqin.broadcast

com.netqin.ps.receiver.AlarmReceiver

vault.intent.action.pointcard_expired
vault.intent.action.pointcard_expireddate_less_than_seven_day
android.intent.action.REGULAR
android.intent.action.TIME_SET
android.intent.action.DATE_CHANGED
android.intent.action.ALARM_ACTION_HIDE_MODE_TIMEOUT
android.intent.action.ALARM_ACTION_SMS_SMS_PAYMENT_TIMEOUT
android.intent.action.alarm_liebaoad
android.intent.action.alarm_firebaseremote
android.intent.action.alarm_google_pg_ad

com.netqin.ps.receiver.PublicDataReceiver

android.intent.action.public

com.netqin.ps.receiver.CallReceiver

android.intent.action.NEW_OUTGOING_CALL
android.intent.action.PHONE_STATE

com.netqin.ps.receiver.InstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.netqin.ps.receiver.PackageReceiver

android.intent.action.MY_PACKAGE_REPLACED

com.netqin.ps.billing.BillingReceiver

com.android.vending.billing.IN_APP_NOTIFY
com.android.vending.billing.RESPONSE_CODE
com.android.vending.billing.PURCHASE_STATE_CHANGED

com.netqin.ps.receiver.ConnectDataLineReceiver

android.intent.action.MEDIA_EJECT
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

com.netqin.ps.deviceManager.NqDeviceAdmin

android.app.action.DEVICE_ADMIN_ENABLED

com.netqin.ps.receiver.StatisticsSendSmsReceiver

com.netqin.ps.receiver.StatisticsSendSmsReceiver.MESSAGE_SENT

com.netqin.ps.receiver.NetworkConnectChangedReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.net.wifi.WIFI_STATE_CHANGED
android.net.wifi.STATE_CHANGE

com.duapps.ad.base.PackageAddReceiver

android.intent.action.PACKAGE_ADDED

com.library.caller.CallerReceiver

android.intent.action.PHONE_STATE
android.intent.action.NEW_OUTGOING_CALL
android.caller.sdk.action.broadcast

com.easyxapp.xp.receiver.SimpleReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.easyxapp.xp.receiver.XpSimpleReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.net.conn.CONNECTIVITY_CHANGE

com.easyxapp.kr.receiver.KrReceiver

android.net.conn.CONNECTIVITY_CHANGE
KR_NEXT_POST_ALARM_INTENT_FILTER_ACTION

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Services

com.library.caller.CallerHandlerService

com.library.caller.CallerHandlerService

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

Android Permissions

fed9de3cc45aa06a6d7ccaf727c9a237_JaffaCakes118

Permissions

com.android.vending.BILLING

android.permission.CAMERA

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.ACCESS_COARSE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.INTERNET

android.permission.GET_TASKS

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_APN_SETTINGS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.DISABLE_KEYGUARD

android.permission.RESTART_PACKAGES

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.WRITE_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

android.permission.READ_LOGS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_MEDIA_STORAGE

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.UPDATE_APP_OPS_STATS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NOTIFICATION_POLICY

com.android.launcher2.permission.INSTALL_SHORTCUT

android.permission.PACKAGE_USAGE_STATS

android.permission.USE_FINGERPRINT

com.netqin.ps.PAYMENT_BROADCAST_PERMISSION

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.CHANGE_NETWORK_STATE

com.google.android.providers.gsf.permission.READ_GSERVICES

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.google.android.c2dm.permission.RECEIVE

com.netqin.ps.permission.C2D_MESSAGE

Sharing

General

Malware Config

Signatures

Files

com.netqin.ps

com.netqin.ps.privacy.HideActivity

Activities

com.netqin.ps.privacy.HideActivity

com.netqin.ps.plugin.PlugInActivity

com.netqin.debug.FileManagerActivity

com.netqin.debug.ChangeIM

com.netqin.debug.NewChangeIM

com.netqin.ps.ui.communication.PrivacyCommunicationActivity

com.netqin.ps.privacy.ShareActivity

com.netqin.ps.ui.communication.PrivacyConversation

com.netqin.ps.ui.keyboard.KeyBoard

com.netqin.ps.passwordsaver.FindPwdActivity

com.netqin.ps.camera.CameraShortCutActivity

Permissions

Receivers

com.netqin.widget.PsWidget

com.netqin.ps.receiver.SmsReceiver

com.netqin.logmanager.MyReceiver

com.netqin.ps.receiver.SmsStatusReceiver

com.netqin.ps.receiver.BootReceiver

com.netqin.ps.receiver.UrlReceiver

com.netqin.ps.receiver.AlarmReceiver

com.netqin.ps.receiver.PublicDataReceiver

com.netqin.ps.receiver.CallReceiver

com.netqin.ps.receiver.InstallReferrerReceiver

com.netqin.ps.receiver.PackageReceiver

com.netqin.ps.billing.BillingReceiver

com.netqin.ps.receiver.ConnectDataLineReceiver

com.netqin.ps.deviceManager.NqDeviceAdmin

com.netqin.ps.receiver.StatisticsSendSmsReceiver

com.netqin.ps.receiver.NetworkConnectChangedReceiver

com.duapps.ad.base.PackageAddReceiver

com.library.caller.CallerReceiver

com.easyxapp.xp.receiver.SimpleReferrerReceiver

com.easyxapp.xp.receiver.XpSimpleReceiver

com.easyxapp.kr.receiver.KrReceiver

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

Services

com.library.caller.CallerHandlerService

com.google.firebase.iid.FirebaseInstanceIdService

Android Permissions

fed9de3cc45aa06a6d7ccaf727c9a237_JaffaCakes118