4a52687872d82f07c1ae7ada584f6faf_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
4a52687872d82f07c1ae7ada584f6faf_JaffaCakes118
Size 17.4MB
Sample241015-2h5vpsvemk
SHA256 665c1305df367067e4e19d0d53476a83ae51c49f8c33a12480b175bd3da1dbdb
MD5 4a52687872d82f07c1ae7ada584f6faf
SHA1 d9100ffa0c355e32753ba81c2c47bca97697afbb
SHA512 6dcd328e1cb5826250fd0d7def1820a8df3da1bcdc391feee5781c1397ec6697bd4bdc4c8fc31e732499c975d4d5e239e21a40c747f5fba68522667b5e7f111d
SSDEEP 393216:Ulb0S11zSvxg2VSXJ3CTf3unt75fCxtFWdLdLC3CyY25LGG:UVx11zaVSXYjerqfIL4OhG
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 25 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

File Explorer

4a52687872d82f07c1ae7ada584f6faf_JaffaCakes118

.apk 17.4MB
AlipayMSP206_PPS3_V3.5.4.0619.apk

.apk 354KB

4a52687872d82f07c1ae7ada584f6faf_JaffaCakes118

SHA256 665c1305df367067e4e19d0d53476a83ae51c49f8c33a12480b175bd3da1dbdb
MD5 4a52687872d82f07c1ae7ada584f6faf
SHA1 d9100ffa0c355e32753ba81c2c47bca97697afbb
SHA512 6dcd328e1cb5826250fd0d7def1820a8df3da1bcdc391feee5781c1397ec6697bd4bdc4c8fc31e732499c975d4d5e239e21a40c747f5fba68522667b5e7f111d
SSDEEP 393216:Ulb0S11zSvxg2VSXJ3CTf3unt75fCxtFWdLdLC3CyY25LGG:UVx11zaVSXYjerqfIL4OhG
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:x86

tv.pps.mobile

android.permission.INTERNET android.permission.READ_PHONE_STATE android.permission.ACCESS_NETWORK_STATE android.permission.RECEIVE_BOOT_COMPLETED android.permission.BROADCAST_STICKY android.permission.WRITE_SETTINGS android.permission.VIBRATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.SYSTEM_ALERT_WINDOW android.permission.DISABLE_KEYGUARD android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_WIFI_STATE android.permission.INTERNET android.permission.GET_TASKS android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.WRITE_EXTERNAL_STORAGE android.permission.WAKE_LOCK android.permission.READ_PHONE_STATE android.permission.VIBRATE android.permission.CHANGE_CONFIGURATION android.permission.WRITE_SETTINGS android.permission.RECORD_AUDIO android.permission.CHANGE_NETWORK_STATE android.permission.RESTART_PACKAGES android.permission.READ_EXTERNAL_STORAGE android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_LOCATION_EXTRA_COMMANDS android.permission.CAMERA android.permission.RECORD_AUDIO android.permission.CHANGE_WIFI_STATE android.permission.FLASHLIGHT android.permission.CHANGE_WIFI_STATE android.permission.READ_LOGS android.permission.READ_CONTACTS com.android.launcher.permission.INSTALL_SHORTCUT com.android.launcher.permission.READ_SETTINGS com.android.launcher.permission.WRITE_SETTINGS com.huawei.launcher2.permission.READ_SETTINGS com.huawei.launcher2.permission.WRITE_SETTINGS com.huawei.launcher3.permission.READ_SETTINGS com.huawei.launcher3.permission.WRITE_SETTINGS com.huawei.android.launcher.permission.READ_SETTINGS com.huawei.android.launcher.permission.WRITE_SETTINGS com.anddoes.launcher.permission.READ_SETTINGS com.anddoes.launcher.permission.WRITE_SETTINGS com.htc.launcher.permission.READ_SETTINGS com.htc.launcher.permission.WRITE_SETTINGS com.fede.launcher.permission.READ_SETTINGS com.fede.launcher.permission.WRITE_SETTINGS org.adw.launcher.permission.READ_SETTINGS org.adw.launcher.permission.WRITE_SETTINGS com.qihoo360.launcher.permission.READ_SETTINGS com.qihoo360.launcher.permission.WRITE_SETTINGS com.lge.launcher.permission.READ_SETTINGS com.lge.launcher.permission.WRITE_SETTINGS com.android.browser.permission.READ_HISTORY_BOOKMARKS android.permission.ACCESS_NETWORK_STATE android.permission.INTERNET android.permission.ACCESS_WIFI_STATE android.permission.CHANGE_WIFI_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_PHONE_STATE android.permission.CALL_PHONE android.permission.ACCESS_FINE_LOCATION android.permission.BAIDU_LOCATION_SERVICE android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_MOCK_LOCATION android.permission.ACCESS_GPS android.permission.READ_LOGS android.permission.GET_TASKS android.permission.READ_CONTACTS android.permission.WRITE_CONTACTS android.permission.WRITE_EXTERNAL_STORAGE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.RECORD_AUDIO android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.READ_PHONE_STATE android.permission.CHANGE_NETWORK_STATE android.permission.CHANGE_WIFI_STATE android.permission.WAKE_LOCK android.permission.RESTART_PACKAGES

.WelcomeActivity

android.intent.action.MAIN

com.google.ads.AdActivity

cn.domob.android.ads.DomobActivity

.framework.FrameFragmentActivity

tv.pps.module.player.video.PPSVideoPlayerActivity

tv.pps.mobile.html5webviewcore.HTML5WebViewPlayer

tv.pps.mobile.wxapi.WXEntryActivity

.channel.DetailShareActivity

.camera.LocalUploadActivity

.weather.WeatherActivity

.weather.WeatherCityActivity

.camera.UploadListActivity

.camera.VideoInfoActivity

.camera.EditVideoActivity

.camera.NewChannelActivity

.camera.WebViewActivity

.quickpass.QuickPassAcitivity

.quickpass.QuickPassHistoryAcitivity

.quickpass.QuickPassSendActivity

.quickpass.QuickPassReceiveActivity

.search.SearchBTWebViewActivity

.camera.CameraChannelActivity

tv.pps.mobile.qrcode.util.CaptureActivity

tv.pps.mobile.qrcode.util.SCAN android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW

com.tencent.weibo.sdk.android.component.Authorize

tv.pps.vipmodule.MainActivity

tv.pps.vipmodule.alipay.ui.AliOrderPayActivity

tv.pps.vipmodule.alipay.ui.AliOrderIqyPayActivity

tv.pps.mobile.search.SearchBTListActivity

tv.pps.mobile.widget.SearchWidgetActivity

.greentail.GreenTailActivity

tv.pps.mobile.action.greentail

.gamecenter.utils.AppStatusReceiver

android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED android.intent.action.PACKAGE_REPLACED

.widget.WidgetProvider

tv.pps.mobile.action.widget.click.intoapp android.appwidget.action.APPWIDGET_UPDATE tv.pps.mobile.action.widget.click.currentimage android.appwidget.action.APPWIDGET_UPDATE tv.pps.mobile.action.widget.click.preimage android.appwidget.action.APPWIDGET_UPDATE tv.pps.mobile.action.widget.click.nextimage android.appwidget.action.APPWIDGET_UPDATE tv.pps.mobile.action.widget.updateimage tv.pps.mobile.action.widget.restartservice

.widget.SearchWidget

tv.pps.mobile.widget.SearchWidget.SOURCE android.appwidget.action.APPWIDGET_UPDATE tv.pps.mobile.widget.SearchWidget.INPUT android.appwidget.action.APPWIDGET_UPDATE tv.pps.mobile.widget.SearchWidget.SEARCH android.appwidget.action.APPWIDGET_UPDATE

tv.pps.mobile.push.PushMessageReceiver

com.baidu.android.pushservice.action.MESSAGE com.baidu.android.pushservice.action.RECEIVE com.baidu.android.pushservice.action.notification.CLICK

com.baidu.android.pushservice.PushServiceReceiver

android.intent.action.BOOT_COMPLETED android.net.conn.CONNECTIVITY_CHANGE com.baidu.android.pushservice.action.notification.SHOW com.baidu.android.pushservice.action.media.CLICK

com.baidu.android.pushservice.RegistrationReceiver

com.baidu.android.pushservice.action.METHOD com.baidu.android.pushservice.action.BIND_SYNC android.intent.action.PACKAGE_REMOVED

AlipayMSP206_PPS3_V3.5.4.0619.apk

SHA256 46f025d57f9aed1fb674c0fe8fc77add93cf00ea6e1633596955f33426be7688
MD5 12ae4560d8350db4bd6fa3bc1589614c
SHA1 dbbfce036a1823aaec9d1c7b621adbd7317f7fa9
SHA512 df7348142a8c294d0d7f7ce77795fd0f81f60831ca1831164e5060c900aa90af430b11f6972103a5c6307d81d8cdf095105a9ab3d01c2183d10d01910976c6fd
SSDEEP 6144:ipIlfloegHi/BBs3dWcfihtB7+Y3Ju4g29f5C8EcPK+WvyQcy2fn1E:ip2JgC/BBsNWfh3Vcc5CLE8Rcy2fn1E
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.alipay.android.app

Android Permissions

4a52687872d82f07c1ae7ada584f6faf_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.BROADCAST_STICKY

android.permission.WRITE_SETTINGS

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.DISABLE_KEYGUARD

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.GET_TASKS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.VIBRATE

android.permission.CHANGE_CONFIGURATION

android.permission.WRITE_SETTINGS

android.permission.RECORD_AUDIO

android.permission.CHANGE_NETWORK_STATE

android.permission.RESTART_PACKAGES

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.CHANGE_WIFI_STATE

android.permission.FLASHLIGHT

android.permission.CHANGE_WIFI_STATE

android.permission.READ_LOGS

android.permission.READ_CONTACTS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

com.huawei.launcher2.permission.READ_SETTINGS

com.huawei.launcher2.permission.WRITE_SETTINGS

com.huawei.launcher3.permission.READ_SETTINGS

com.huawei.launcher3.permission.WRITE_SETTINGS

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

com.anddoes.launcher.permission.READ_SETTINGS

com.anddoes.launcher.permission.WRITE_SETTINGS

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.WRITE_SETTINGS

Sharing

General

Malware Config

Signatures

File Explorer

4a52687872d82f07c1ae7ada584f6faf_JaffaCakes118

.WelcomeActivity

com.google.ads.AdActivity

cn.domob.android.ads.DomobActivity

.framework.FrameFragmentActivity

tv.pps.module.player.video.PPSVideoPlayerActivity

tv.pps.mobile.html5webviewcore.HTML5WebViewPlayer

tv.pps.mobile.wxapi.WXEntryActivity

.channel.DetailShareActivity

.camera.LocalUploadActivity

.weather.WeatherActivity

.weather.WeatherCityActivity

.camera.UploadListActivity

.camera.VideoInfoActivity

.camera.EditVideoActivity

.camera.NewChannelActivity

.camera.WebViewActivity

.quickpass.QuickPassAcitivity

.quickpass.QuickPassHistoryAcitivity

.quickpass.QuickPassSendActivity

.quickpass.QuickPassReceiveActivity

.search.SearchBTWebViewActivity

.camera.CameraChannelActivity

tv.pps.mobile.qrcode.util.CaptureActivity

com.tencent.weibo.sdk.android.component.Authorize

tv.pps.vipmodule.MainActivity

tv.pps.vipmodule.alipay.ui.AliOrderPayActivity

tv.pps.vipmodule.alipay.ui.AliOrderIqyPayActivity

tv.pps.mobile.search.SearchBTListActivity

tv.pps.mobile.widget.SearchWidgetActivity

.greentail.GreenTailActivity

org.openudid.OpenUDID_service

com.baidu.location.f

.gamecenter.download.DownloadService

.download.BackDownloadService

.service.UpdateService

.service.PushService

.service.CrashService

.service.DeliverService

.service.ApkDownService

.service.InitService

tv.pps.vipmodule.vip.utils.VipService

tv.pps.mobile.camera.CameraService

.widget.WidgetUpdateService

com.baidu.android.pushservice.PushService

.gamecenter.utils.AppStatusReceiver

.widget.WidgetProvider

.widget.SearchWidget

tv.pps.mobile.push.PushMessageReceiver

com.baidu.android.pushservice.PushServiceReceiver

com.baidu.android.pushservice.RegistrationReceiver

AlipayMSP206_PPS3_V3.5.4.0619.apk

.activity.Cashier

.activity.Alerter

.activity.Welcome

.activity.Updater

.activity.PageForBrowser

.activity.CertBiz

.activity.MessageActivity

.AlixService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

com.alipay.notify.report.PushDistributer

.stability.AlarmReciver

com.alipay.notify.BroadcastActionReceiver

.UserIdShareProvider

Android Permissions

4a52687872d82f07c1ae7ada584f6faf_JaffaCakes118