24f9dbaa413bd56bc0934098ceb98791_JaffaCakes118

General

Target

24f9dbaa413bd56bc0934098ceb98791_JaffaCakes118
Size

17.3MB
MD5

24f9dbaa413bd56bc0934098ceb98791
SHA1

4c0a65e1c773f905d5c3f22b884dd2bb1b26ec66
SHA256

1fed12ebc7314059e1b5f00c9aedcbe950a70c409ea6c683eeacd003caa013b8
SHA512

1cf6db404e71549d25f095a7c3a280e077f10a7ae0a937713f04ed5620370f393f23bb038e64b11a4a79ba76172f2589d17250714ca4acca4ef33c5d9bdb84ba
SSDEEP

393216:4NfX0siq9eFsdPBLYjiFcPayDsPrr28oZ2zDV+lDbjkMgoVfeXJK:6X0sieeaNuviCsPrr2mHslDnReJK

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS

Files

24f9dbaa413bd56bc0934098ceb98791_JaffaCakes118
.apk android arch:arm

sogou.mobile.explorer

sogou.mobile.explorer.NoDisplayActivity

Activities

sogou.mobile.explorer.NoDisplayActivity

android.intent.action.MAIN

sogou.mobile.explorer.BrowserActivity

android.speech.action.VOICE_SEARCH_RESULTS
com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.WEB_SEARCH
android.intent.action.MEDIA_SEARCH
android.intent.action.SEARCH
android.intent.action.VIEW

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

sogou.mobile.explorer.video.VideoControllerActivity

android.intent.action.VIEW
android.intent.action.VIEW

Permissions

android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CAMERA
android.permission.CHANGE_CONFIGURATION
android.permission.CHANGE_WIFI_STATE
android.permission.FLASHLIGHT
android.permission.GET_TASKS
android.permission.INTERNET
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_LOGS
android.permission.READ_PHONE_STATE
android.permission.SET_WALLPAPER
android.permission.SYSTEM_ALERT_WINDOW
android.permission.VIBRATE
android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WRITE_SETTINGS
android.permission.CHANGE_NETWORK_STATE
android.permission.RECEIVE_USER_PRESENT
android.permission.EXPAND_STATUS_BAR
com.android.alarm.permission.SET_ALARM
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_DOWNLOAD_MANAGER
android.permission.GET_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.NFC
android.permission.SEND_DOWNLOAD_COMPLETED_INTENTS
android.permission.READ_SYNC_SETTINGS
android.permission.WRITE_SYNC_SETTINGS
android.permission.MANAGE_ACCOUNTS
android.permission.READ_PROFILE
android.permission.READ_CONTACTS
com.android.browser.permission.READ_HISTORY_BOOKMARKS
com.android.browser.permission.WRITE_HISTORY_BOOKMARKS

Receivers

sogou.mobile.explorer.download.DownloadReceiver

sogoumse.intent.action.DOWNLOAD_NOTIFICATION_CLICKED
android.net.conn.CONNECTIVITY_CHANGE

sogou.mobile.explorer.download.DownloadCompletedReceiver

android.intent.action.DOWNLOAD_COMPLETED

sogou.mobile.explorer.novel.NovelReceiver

android.net.conn.CONNECTIVITY_CHANGE

sogou.mobile.explorer.ConnectionChangeReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.sogou.udp.push.SystemReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
android.intent.action.PACKAGE_REMOVED

com.sogou.udp.push.PushServiceReceiver

com.sogou.pushservice.action.METHOD

sogou.mobile.explorer.push.UpushStatusReceiver

com.sogou.pushservice.action.pushstate.conn
com.sogou.pushservice.action.pushstate.unconn

sogou.mobile.explorer.push.UpushMessageReceiver

sogou.mobile.explorer.feichuan.notification
sogou.mobile.explorer.custom.push.notification
sogou.mobile.explorer.custom.version.upgrade.notification
sogou.mobile.explorer.custom.version.upgrade.button.action

sogou.mobile.explorer.push.PushBroadCastReceiver

android.intent.action.USER_PRESENT

sogou.mobile.explorer.version.VersionNotificationReceiver

sogou.mobile.explorer.version.notification

sogou.mobile.explorer.readcenter.offline.DownloadReceiver

android.intent.action.BOOT_COMPLETED

sogou.mobile.explorer.share.ShareBroadcastReceiver

sogou.mobile.explorer.action.share

sogou.mobile.explorer.SearchBroadcastReceiver

sogou.mobile.explorer.action.search

sogou.mobile.explorer.share.InstallerReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

sogou.mobile.explorer.ActivationBrowserReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE

sogou.mobile.explorer.notification.StartQuickEntryServiceReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

sogou.mobile.explorer.file.SDCardReceiver

android.intent.action.MEDIA_BAD_REMOVAL
android.intent.action.MEDIA_MOUNTED

sogou.mobile.explorer.DeviceReceiver

android.app.action.DEVICE_ADMIN_ENABLED

Services

com.sogou.passportsdk.service.PassportUploadService

com.sogou.passport.service.upload

Android Permissions

24f9dbaa413bd56bc0934098ceb98791_JaffaCakes118

Permissions

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CAMERA

android.permission.CHANGE_CONFIGURATION

android.permission.CHANGE_WIFI_STATE

android.permission.FLASHLIGHT

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_LOGS

android.permission.READ_PHONE_STATE

android.permission.SET_WALLPAPER

android.permission.SYSTEM_ALERT_WINDOW

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

android.permission.CHANGE_NETWORK_STATE

android.permission.RECEIVE_USER_PRESENT

android.permission.EXPAND_STATUS_BAR

com.android.alarm.permission.SET_ALARM

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.NFC

android.permission.SEND_DOWNLOAD_COMPLETED_INTENTS

android.permission.READ_SYNC_SETTINGS

android.permission.WRITE_SYNC_SETTINGS

android.permission.MANAGE_ACCOUNTS

android.permission.READ_PROFILE

android.permission.READ_CONTACTS

com.android.browser.permission.READ_HISTORY_BOOKMARKS

com.android.browser.permission.WRITE_HISTORY_BOOKMARKS

Sharing

General

Malware Config

Signatures

Files

sogou.mobile.explorer

sogou.mobile.explorer.NoDisplayActivity

Activities

sogou.mobile.explorer.NoDisplayActivity

sogou.mobile.explorer.BrowserActivity

com.tencent.tauth.AuthActivity

sogou.mobile.explorer.video.VideoControllerActivity

Permissions

Receivers

sogou.mobile.explorer.download.DownloadReceiver

sogou.mobile.explorer.download.DownloadCompletedReceiver

sogou.mobile.explorer.novel.NovelReceiver

sogou.mobile.explorer.ConnectionChangeReceiver

com.sogou.udp.push.SystemReceiver

com.sogou.udp.push.PushServiceReceiver

sogou.mobile.explorer.push.UpushStatusReceiver

sogou.mobile.explorer.push.UpushMessageReceiver

sogou.mobile.explorer.push.PushBroadCastReceiver

sogou.mobile.explorer.version.VersionNotificationReceiver

sogou.mobile.explorer.readcenter.offline.DownloadReceiver

sogou.mobile.explorer.share.ShareBroadcastReceiver

sogou.mobile.explorer.SearchBroadcastReceiver

sogou.mobile.explorer.share.InstallerReceiver

sogou.mobile.explorer.ActivationBrowserReceiver

sogou.mobile.explorer.notification.StartQuickEntryServiceReceiver

sogou.mobile.explorer.file.SDCardReceiver

sogou.mobile.explorer.DeviceReceiver

Services

com.sogou.passportsdk.service.PassportUploadService

Android Permissions

24f9dbaa413bd56bc0934098ceb98791_JaffaCakes118