10bd51b92a2528ab0a31402fbf0de362_JaffaCakes118

General

Target

10bd51b92a2528ab0a31402fbf0de362_JaffaCakes118
Size

579KB
MD5

10bd51b92a2528ab0a31402fbf0de362
SHA1

6b626395713b3d87a5bf89d830784fe3a72bed23
SHA256

0181b3b0fa1535843e388e06210d9a8673b6bb7f454e9725399a666e09f293b4
SHA512

767d58ce9a50e54d0100f3abeb4abb42436a8640b55ef28706f37933faacbffa8716fa435aa7db6eae2f6876496c61fa698bc4b96b90845da3a23d4647a0f6c6
SSDEEP

12288:Mg1PqH/c4cyt5754NOEmBGO3yC5Xur9ybbIreO/tw:11x4cAQUYOb5+JCI7O

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

10bd51b92a2528ab0a31402fbf0de362_JaffaCakes118
.zip
sj3gxh/sj3gxh2.1.5.apk
.apk android

com.fywork.signalcheck

.MainActivity

Activities

.MainActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_LOGS
android.permission.GET_TASKS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.VIBRATE
android.permission.ACCESS_COARSE_LOCATION
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.WAKE_LOCK
android.permission.READ_LOGS
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.FLASHLIGHT
android.permission.SYSTEM_ALERT_WINDOW

Receivers

.OnBoot

android.intent.action.BOOT_COMPLETED

com.kuguo.push.MainReceiver

android.intent.action.PACKAGE_ADDED
android.net.conn.CONNECTIVITY_CHANGE

com.doumob.main.AdReceiver

com.windrey.penguin
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_ADDED

com.iadpush.adp.Re

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.net.conn.CONNECTIVITY_CHANGE
com.lseiei.downloadManager
com.cdib.b

Services

.SignalService

com.fywork.signalcheck.SignalService

com.iadpush.adp.NS

com.iadpush.adp.NS

com.iadpush.adp.BS

com.iadpush.adp.BS
sj3gxh/ʹǰؿ.txt
sj3gxh/.url

Sharing

General

Malware Config

Signatures

Files

com.fywork.signalcheck

.MainActivity

Activities

.MainActivity

Permissions

Receivers

.OnBoot

com.kuguo.push.MainReceiver

com.doumob.main.AdReceiver

com.iadpush.adp.Re

Services

.SignalService

com.iadpush.adp.NS

com.iadpush.adp.BS