01cc77466bb4f9a6eee6bb59dc4b43d1_JaffaCakes118

General

Target

01cc77466bb4f9a6eee6bb59dc4b43d1_JaffaCakes118
Size

1.9MB
MD5

01cc77466bb4f9a6eee6bb59dc4b43d1
SHA1

3ea03e1fde00181a727f4ea04d5c7a3b3a6fc37f
SHA256

9f7275be08bf19b6e1ee5cd0d8e74c5ccdd798aaff861da540a0fbdc15132b9e
SHA512

a8ce21d9138bf5d1c8a9c1ac5d8f1779fa4a65f278348ee1f08837f961774b83a87bab33192e4e783deef7b9ca8e14a9858924bae5a40f666d3848ebbbebbbf4
SSDEEP

49152:0+//QsdZncgD73GNMgsLXPgKHakBbOKTPFyyDZdgxr4HdJ:0WXncgfGWgszPbBRyBSr

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 20 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

Files

01cc77466bb4f9a6eee6bb59dc4b43d1_JaffaCakes118
.apk android arch:arm

com.nearme.atlas

com.nearme.atlas.ActionActivity

Activities

com.nearme.atlas.NearmeNotificationActivity

nearme.plugin.startup.failed.file.illegal

com.nearme.plugin.pay.activity.MainChargeActivity

nearme.plugin.host.startup.action.single_pay

com.nearme.atlas.WXPayHostActivity

android.intent.action.VIEW

Permissions

android.permission.VIBRATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.RESTART_PACKAGES
android.permission.READ_PHONE_STATE
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.SEND_SMS
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.RECEIVE_SMS
com.oppo.findmyphone.permission.AUTH_TOKEN
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.VIBRATE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_PHONE_STATE
android.permission.GET_ACCOUNTS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.ACCESS_WIFI_STATE
android.permission.SEND_SMS
android.permission.READ_SETTINGS
android.permission.READ_LOGS
android.permission.GET_TASKS
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.INSTALL_PACKAGES
android.permission.ACCESS_WIFI_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.VIBRATE
android.permission.SEND_SMS
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.RECEIVE_SMS
android.permission.GET_TASKS
android.permission.DISABLE_KEYGUARD
android.permission.CHANGE_CONFIGURATION
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.RUN_INSTRUMENTATION
android.permission.WRITE_SETTINGS

Receivers

com.nearme.atlas.declare.PayProxyBroadcastReceiver

plugin.exit
plugin_update_force_clear_data
alipay_response

com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver1

plugin.exit
plugin_update_force_clear_data

com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver2

plugin.exit
plugin_update_force_clear_data

com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver3

plugin.exit
plugin_update_force_clear_data

com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver4

plugin.exit
plugin_update_force_clear_data

com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver5

plugin.exit
plugin_update_force_clear_data

com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver6

plugin.exit
plugin_update_force_clear_data

com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver7

plugin.exit
plugin_update_force_clear_data

com.nearme.atlas.NearmeActionReceiver

nearme.host.plugin.action.broadcast.background
com.android.action.send

com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver8

plugin.exit
plugin_update_force_clear_data

com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver9

plugin.exit
plugin_update_force_clear_data

com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver10

plugin.exit
plugin_update_force_clear_data

com.nearme.atlas.declare.AccountProxyBroadcastReceiver

plugin.exit
plugin_update_force_clear_data

com.nearme.atlas.NearmeReceiver

com.nearme.plugin.call.alipay

com.nearme.plugin.framework.core.broadcast.NearmeProxyBroadcastReceiver

pre_load
plugin.exit
plugin_update_force_clear_data

com.nearme.plugin.pay.receiver.ProcessReceiver

com.nearme.plugin.pay.action.directpay

Services

com.nearme.atlas.PayActionService

com.oppo.action.PAY_ACTION

com.nearme.plugin.framework.download.DownloadService

com.nearme.plugin.framework.downloadservice

Android Permissions

01cc77466bb4f9a6eee6bb59dc4b43d1_JaffaCakes118

Permissions

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.RESTART_PACKAGES

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.RECEIVE_SMS

com.oppo.findmyphone.permission.AUTH_TOKEN

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.VIBRATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_PHONE_STATE

android.permission.GET_ACCOUNTS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.ACCESS_WIFI_STATE

android.permission.SEND_SMS

android.permission.READ_SETTINGS

android.permission.READ_LOGS

android.permission.GET_TASKS

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.INSTALL_PACKAGES

android.permission.ACCESS_WIFI_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.RECEIVE_SMS

android.permission.GET_TASKS

android.permission.DISABLE_KEYGUARD

android.permission.CHANGE_CONFIGURATION

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

Sharing

General

Malware Config

Signatures

Files

com.nearme.atlas

com.nearme.atlas.ActionActivity

Activities

com.nearme.atlas.NearmeNotificationActivity

com.nearme.plugin.pay.activity.MainChargeActivity

com.nearme.atlas.WXPayHostActivity

Permissions

Receivers

com.nearme.atlas.declare.PayProxyBroadcastReceiver

com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver1

com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver2

com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver3

com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver4

com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver5

com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver6

com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver7

com.nearme.atlas.NearmeActionReceiver

com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver8

com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver9

com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver10

com.nearme.atlas.declare.AccountProxyBroadcastReceiver

com.nearme.atlas.NearmeReceiver

com.nearme.plugin.framework.core.broadcast.NearmeProxyBroadcastReceiver

com.nearme.plugin.pay.receiver.ProcessReceiver

Services

com.nearme.atlas.PayActionService

com.nearme.plugin.framework.download.DownloadService

Android Permissions

01cc77466bb4f9a6eee6bb59dc4b43d1_JaffaCakes118