5ec546d1d6f1a65c142339f05ba60a67_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
5ec546d1d6f1a65c142339f05ba60a67_JaffaCakes118
Size 12.4MB
Sample241019-1dr8dascmn
SHA256 0329e06f7daafbf9b7f3b1064be7c93b7d9aadb1b5e1e799100f0452ccde52e9
MD5 5ec546d1d6f1a65c142339f05ba60a67
SHA1 d94feaf62351587837c0d5f2c34b8bc8d87cd6c9
SHA512 920805e81f916e46529352e2b23f8c9ac80485200375b7c22e230b71da16aec461878492724f6d74234c3937977976943332a21c92239188bd9718e680b3a04b
SSDEEP 196608:ZdwDyJWJmH8gJtTWzJaYkLQ49qXKXx8FYGFnpwUFo:zT28KXKBb2LFo
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Requests dangerous framework permissions 20 IoCs

description	ioc
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

5ec546d1d6f1a65c142339f05ba60a67_JaffaCakes118

.apk 12.4MB
LockScreenPlugin.apk

.apk 230KB
alipay_msp.apk

.apk 354KB

5ec546d1d6f1a65c142339f05ba60a67_JaffaCakes118

SHA256 0329e06f7daafbf9b7f3b1064be7c93b7d9aadb1b5e1e799100f0452ccde52e9
MD5 5ec546d1d6f1a65c142339f05ba60a67
SHA1 d94feaf62351587837c0d5f2c34b8bc8d87cd6c9
SHA512 920805e81f916e46529352e2b23f8c9ac80485200375b7c22e230b71da16aec461878492724f6d74234c3937977976943332a21c92239188bd9718e680b3a04b
SSDEEP 196608:ZdwDyJWJmH8gJtTWzJaYkLQ49qXKXx8FYGFnpwUFo:zT28KXKBb2LFo
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.mobilewindow

android.permission.EXPAND_STATUS_BAR android.permission.READ_CONTACTS android.permission.WRITE_CONTACTS android.permission.SET_WALLPAPER android.permission.SET_WALLPAPER_HINTS android.permission.VIBRATE android.permission.WRITE_SETTINGS android.permission.PERSISTENT_ACTIVITY android.permission.INTERNET android.permission.READ_SMS android.permission.SEND_SMS android.permission.RECEIVE_SMS android.permission.WRITE_SMS android.permission.RECEIVE_BOOT_COMPLETED android.permission.GET_TASKS android.permission.DISABLE_KEYGUARD android.permission.WRITE_EXTERNAL_STORAGE android.permission.ACCESS_NETWORK_STATE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.READ_PHONE_STATE android.permission.CHANGE_CONFIGURATION android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_WIFI_STATE android.permission.CHANGE_NETWORK_STATE android.permission.ACCESS_FINE_LOCATION android.permission.WAKE_LOCK android.permission.RECORD_AUDIO android.permission.CAMERA com.android.launcher.permission.INSTALL_SHORTCUT android.permission.SYSTEM_ALERT_WINDOW android.permission.CHANGE_WIFI_STATE android.permission.READ_LOGS android.permission.BROADCAST_STICKY android.permission.REORDER_TASKS android.permission.CALL_PHONE android.permission.RESTART_PACKAGES android.permission.AUTHENTICATE_ACCOUNTS android.permission.MANAGE_ACCOUNTS android.permission.GET_ACCOUNTS android.permission.READ_SYNC_SETTINGS android.permission.WRITE_SYNC_SETTINGS android.permission.BIND_APPWIDGET android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_WIFI_STATE android.permission.ACCESS_NETWORK_STATE android.permission.CHANGE_WIFI_STATE android.permission.READ_PHONE_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.INTERNET android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.READ_LOGS android.permission.VIBRATE android.permission.WRITE_SETTINGS

.ScreenLoader

android.intent.action.MAIN android.intent.action.MAIN

.launcher.Launcher

android.intent.action.SEND android.intent.action.SENDTO android.intent.action.SENDTO android.intent.action.CREATE_SHORTCUT

.FlashWindow

.launcher.MyLauncherSettings

.launcher.ActivityPickerActivity

.launcher.LauncherAppWidgetBinder

.launcher.CustomShirtcutActivity

.catalogue.AppInfoMList

.FlashWnd

.ScanActivity

com.baidu.mobstat.demo.supportv4fragment.MainFragmentActivity

com.baidu.mobstat.demo.appfragment.AppFragmentDemoActivity

com.mobilewindow.favorstyle.Launcher

com.mobilewindow.favorstyle.ToggleWeightWatcher

com.mobilewindow.favorstyle.WallpaperPickerActivity

android.intent.action.SET_WALLPAPER

com.mobilewindow.favorstyle.WallpaperCropActivity

android.service.wallpaper.CROP_AND_SET_WALLPAPER

com.mobilewindow.favorstyle.MemoryDumpActivity

com.mobilewindow.favorstyle.EditIconActivity

com.mobilewindow.favorstyle.LauncherSetting

com.mobilewindow.DecorCenter

com.mobilewindow.DecorSearch

com.mobilewindow.DecorDetail

com.mobilewindow.DecorWallpaperAlbum

com.mobilewindow.DecorWallpaperDetail

com.mobilewindow.puzzle.PuzzleImgActivity

com.mobilewindow.DecorLocal

com.mobilewindow.DecorWallpaperLocal

com.mobilewindow.DecorFontLocal

com.mobilewindow.favorstyle.LauncherSettingSec

com.mobilewindow.RecommendCenter

com.mobilewindow.RecommendApps

com.mobilewindow.RecommendDetail

com.mobilewindow.StyleDiy

com.mobilewindow.ImageReview

com.xabber.android.ui.ContactList

android.intent.action.VIEW android.intent.action.SEND android.intent.action.SENDTO android.intent.action.SENDTO android.intent.action.CREATE_SHORTCUT

com.xabber.android.ui.LoadActivity

com.xabber.android.ui.AboutViewer

com.xabber.android.ui.AccountList

com.xabber.android.ui.AccountEditor

com.xabber.android.ui.ChatList

com.xabber.android.ui.OccupantList

com.xabber.android.ui.ChatViewer

android.intent.action.MAIN

com.xabber.android.ui.ContactEditor

com.xabber.android.ui.ContactAdd

com.xabber.android.ui.AccountAdd

com.xabber.android.ui.OAuthActivity

com.xabber.android.ui.MUCEditor

com.xabber.android.ui.StatusEditor

com.xabber.android.ui.PreferenceEditor

com.xabber.android.ui.ChatEditor

com.xabber.android.ui.ContactViewer

android.intent.action.VIEW

com.xabber.android.ui.FingerprintViewer

com.xabber.android.ui.QuestionViewer

com.xabber.android.ui.OpenSourceViewer

com.xabber.android.ui.CertificateConfirmation

com.xabber.android.ui.PasswordRequest

com.xabber.android.ui.ArchiveRequest

com.xabber.android.ui.PhraseList

com.xabber.android.ui.PhraseEditor

com.xabber.android.ui.ReconnectionActivity

com.xabber.android.ui.ClearNotifications

com.alipay.android.app.sdk.WapPayActivity

.launcher.InstallShortcutReceiver

com.android.launcher.action.INSTALL_SHORTCUT

.mobiletool.BootReceiver

android.intent.action.BOOT_COMPLETED

.mobiletool.AlarmReceiver

.mobiletool.InstallReceiver

.mobiletool.AlarmOphoneHomeReceiver

com.mobilewindow.favorstyle.PreloadReceiver

com.android.launcher.action.PRELOAD_WORKSPACE

com.mobilewindow.favorstyle.InstallShortcutReceiver

com.android.launcher.action.INSTALL_SHORTCUT

com.mobilewindow.favorstyle.UninstallShortcutReceiver

com.android.launcher.action.UNINSTALL_SHORTCUT

com.mobilewindow.favorstyle.UserInitializeReceiver

android.intent.action.USER_INITIALIZE

com.mobilewindow.favorstyle.PackageChangedReceiver

android.intent.action.PACKAGE_CHANGED android.intent.action.PACKAGE_REPLACED android.intent.action.PACKAGE_REMOVED

com.mobilewindow.favorstyle.weather.WeatherWidget

android.appwidget.action.APPWIDGET_UPDATE android.intent.action.USER_PRESENT android.intent.action.BOOT_COMPLETED com.mobilewindow.WeatherPanelHotArea

com.mobilewindow.favorstyle.weather.NetBroadcastReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.xabber.android.receiver.BootReceiver

android.intent.action.BOOT_COMPLETED

com.xabber.android.receiver.GoAwayReceiver

com.xabber.android.receiver.GoXaReceiver

com.xabber.android.receiver.ComposingPausedReceiver

LockScreenPlugin.apk

SHA256 6ee84cd4e06859ebdcd4adbe3a662f1bc68d640de6202ff82b15a255e00d92b0
MD5 1184e1f88817845fe3f8d02c88a96fe0
SHA1 7a2c34f5b0b715e5e2e7b49e69b462c5ecdc3fc6
SHA512 1010eaf4402261b775b0e3382248ea51197e9df63a093e6f16f380c4b044f73a4d676266fbe8bc1de02daeb8d6b381e07ad422f0a0efeb80e4da0a519a1ec454
SSDEEP 6144:dxc2Bm8N8mmp3ifX0V9Q9jFebchqn4ticC/lrTeaO89Y:diCLWU0vuhzApO8i
MD5 SHA1 SHA512 SSDEEP

android

com.mobile.screenlock

alipay_msp.apk

SHA256 ee3c608fff51b313f4e0b3e542bedccb4d4db4c8eb44e63bf4be0d468e9ee117
MD5 89c04e1ebcd58eca6dd93211628ed0bc
SHA1 7d1e77ce25a635299704dbd95bd95c697572ea9d
SHA512 3dccaeff9906401855f3071c91012926d7e9250674ea0bb89606e4862223a8343fc7b9369afe4e50031d261b45437107c018f565da5615c49721c3bf1bf6ed01
SSDEEP 6144:cH8LfOo+BjGVN8TdW4zxgnm1Us3JuOK2vf5C8EcPK+WvyQcQ2fnq7:cHLxBiVN8pWggmlY25CLE8RcQ2fnq7
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.alipay.android.app

Android Permissions

5ec546d1d6f1a65c142339f05ba60a67_JaffaCakes118

Permissions

android.permission.EXPAND_STATUS_BAR

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.SET_WALLPAPER

android.permission.SET_WALLPAPER_HINTS

android.permission.VIBRATE

android.permission.WRITE_SETTINGS

android.permission.PERSISTENT_ACTIVITY

android.permission.INTERNET

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.WRITE_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.GET_TASKS

android.permission.DISABLE_KEYGUARD

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_PHONE_STATE

android.permission.CHANGE_CONFIGURATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.WAKE_LOCK

android.permission.RECORD_AUDIO

android.permission.CAMERA

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CHANGE_WIFI_STATE

android.permission.READ_LOGS

android.permission.BROADCAST_STICKY

android.permission.REORDER_TASKS

android.permission.CALL_PHONE

android.permission.RESTART_PACKAGES

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.MANAGE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.READ_SYNC_SETTINGS

android.permission.WRITE_SYNC_SETTINGS

android.permission.BIND_APPWIDGET

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

Sharing

General

Malware Config

Signatures

File Explorer

5ec546d1d6f1a65c142339f05ba60a67_JaffaCakes118

.ScreenLoader

.launcher.Launcher

.FlashWindow

.launcher.MyLauncherSettings

.launcher.ActivityPickerActivity

.launcher.LauncherAppWidgetBinder

.launcher.CustomShirtcutActivity

.catalogue.AppInfoMList

.FlashWnd

.ScanActivity

com.baidu.mobstat.demo.supportv4fragment.MainFragmentActivity

com.baidu.mobstat.demo.appfragment.AppFragmentDemoActivity

com.mobilewindow.favorstyle.Launcher

com.mobilewindow.favorstyle.ToggleWeightWatcher

com.mobilewindow.favorstyle.WallpaperPickerActivity

com.mobilewindow.favorstyle.WallpaperCropActivity

com.mobilewindow.favorstyle.MemoryDumpActivity

com.mobilewindow.favorstyle.EditIconActivity

com.mobilewindow.favorstyle.LauncherSetting

com.mobilewindow.DecorCenter

com.mobilewindow.DecorSearch

com.mobilewindow.DecorDetail

com.mobilewindow.DecorWallpaperAlbum

com.mobilewindow.DecorWallpaperDetail

com.mobilewindow.puzzle.PuzzleImgActivity

com.mobilewindow.DecorLocal

com.mobilewindow.DecorWallpaperLocal

com.mobilewindow.DecorFontLocal

com.mobilewindow.favorstyle.LauncherSettingSec

com.mobilewindow.RecommendCenter

com.mobilewindow.RecommendApps

com.mobilewindow.RecommendDetail

com.mobilewindow.StyleDiy

com.mobilewindow.ImageReview

com.xabber.android.ui.ContactList

com.xabber.android.ui.LoadActivity

com.xabber.android.ui.AboutViewer

com.xabber.android.ui.AccountList

com.xabber.android.ui.AccountEditor

com.xabber.android.ui.ChatList

com.xabber.android.ui.OccupantList

com.xabber.android.ui.ChatViewer

com.xabber.android.ui.ContactEditor

com.xabber.android.ui.ContactAdd

com.xabber.android.ui.AccountAdd

com.xabber.android.ui.OAuthActivity

com.xabber.android.ui.MUCEditor

com.xabber.android.ui.StatusEditor

com.xabber.android.ui.PreferenceEditor

com.xabber.android.ui.ChatEditor

com.xabber.android.ui.ContactViewer

com.xabber.android.ui.FingerprintViewer

com.xabber.android.ui.QuestionViewer

com.xabber.android.ui.OpenSourceViewer

com.xabber.android.ui.CertificateConfirmation

com.xabber.android.ui.PasswordRequest

com.xabber.android.ui.ArchiveRequest

com.xabber.android.ui.PhraseList

com.xabber.android.ui.PhraseEditor

com.xabber.android.ui.ReconnectionActivity

com.xabber.android.ui.ClearNotifications

com.alipay.android.app.sdk.WapPayActivity

.mobiletool.ThemeCenterBarService

.mobiletool.DownAppService

.mobiletool.AudioService

.mobiletool.ZdLockService

com.baidu.location.f

com.mobilewindow.favorstyle.MemoryTracker

com.mobilewindow.favorstyle.weather.WeatherUpdateService

com.xabber.android.service.XabberService

com.xabber.android.service.SyncAdapterService

com.xabber.android.service.AccountAuthenticatorService

.launcher.InstallShortcutReceiver

.mobiletool.BootReceiver