5f17fd98e3c3657b892296a39cf78037_JaffaCakes118

Sharing

Copy URL Twitter E-mail

Reason

error processing APK: checksum verification failed

Reason

error processing APK: checksum verification failed

Reason

error processing APK: checksum verification failed

General

Target
5f17fd98e3c3657b892296a39cf78037_JaffaCakes118
Size 3.5MB
Sample241019-2wntcawdnq
SHA256 52f84d0ab1b3c82d9995b1afaaee470f1abff1f07347c86727b58fdb1f80d27b
MD5 5f17fd98e3c3657b892296a39cf78037
SHA1 d01c797491ff36b4a216a22b862f3a30b9f9c42d
SHA512 0f8e56b41bd3d879e1803223d4e11a17d89e86dff52a79a43492f8f5470ff87cf116a6ea233b34fc8c2ce0335ad8cc3c81d2a5e8f10818a09960e5d948a4c16d
SSDEEP 98304:AGHoUXyKPDOT7X7pQnr72XzwuJK/CcFe10Sjh:A2yHRQr7mnK/CcFavF
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 13 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to receive WAP push messages.	android.permission.RECEIVE_WAP_PUSH
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS

File Explorer

5f17fd98e3c3657b892296a39cf78037_JaffaCakes118

.apk 3.5MB
com.skymobi.pay.appui_v1001.pl

.apk 211KB
com.skymobi.pay.plugin.main_v10011.pl

.apk 57KB
com.skymobi.pay.plugin.recordupload_v10009.pl

.apk 38KB
com.skymobi.pay.plugin.smspay_v10020.pl

.apk 223KB
skymobi_pay_wxplugin.apk

.apk 33KB
unicom_resource.dat

.apk 45KB

5f17fd98e3c3657b892296a39cf78037_JaffaCakes118

SHA256 52f84d0ab1b3c82d9995b1afaaee470f1abff1f07347c86727b58fdb1f80d27b
MD5 5f17fd98e3c3657b892296a39cf78037
SHA1 d01c797491ff36b4a216a22b862f3a30b9f9c42d
SHA512 0f8e56b41bd3d879e1803223d4e11a17d89e86dff52a79a43492f8f5470ff87cf116a6ea233b34fc8c2ce0335ad8cc3c81d2a5e8f10818a09960e5d948a4c16d
SSDEEP 98304:AGHoUXyKPDOT7X7pQnr72XzwuJK/CcFe10Sjh:A2yHRQr7mnK/CcFavF
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:x86

com.regeemir.jeopar

android.permission.INTERNET android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_EXTERNAL_STORAGE android.permission.READ_PHONE_STATE android.permission.ACCESS_NETWORK_STATE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.ACCESS_WIFI_STATE android.permission.RECEIVE_BOOT_COMPLETED android.permission.VIBRATE android.permission.SEND_SMS android.permission.READ_SMS android.permission.WRITE_SMS android.permission.RECEIVE_SMS android.permission.CHANGE_NETWORK_STATE android.permission.CHANGE_WIFI_STATE android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.GET_TASKS android.permission.WAKE_LOCK android.permission.READ_LOGS android.permission.WRITE_APN_SETTINGS android.permission.SYSTEM_ALERT_WINDOW android.permission.WRITE_SETTINGS android.permission.BLUETOOTH com.android.launcher.permission.INSTALL_SHORTCUT android.permission.RESTART_PACKAGES android.permission.GET_ACCOUNTS com.android.launcher.permission.READ_SETTINGS android.permission.DISABLE_KEYGUARD android.permission.RECEIVE_WAP_PUSH android.permission.READ_CONTACTS android.permission.CHANGE_CONFIGURATION android.permission.RUN_INSTRUMENTATION android.webkit.permission.PLUGIN com.android.launcher.permission.READ_SETTINGS com.android.launcher.permission.WRITE_SETTINGS com.android.launcher2.permission.READ_SETTINGS com.android.launcher2.permission.WRITE_SETTINGS com.android.launcher3.permission.READ_SETTINGS com.android.launcher3.permission.WRITE_SETTINGS org.adw.launcher.permission.READ_SETTINGS org.adw.launcher.permission.WRITE_SETTINGS com.htc.launcher.permission.READ_SETTINGS com.htc.launcher.permission.WRITE_SETTINGS com.qihoo360.launcher.permission.READ_SETTINGS com.qihoo360.launcher.permission.WRITE_SETTINGS com.lge.launcher.permission.READ_SETTINGS com.lge.launcher.permission.WRITE_SETTINGS net.qihoo.launcher.permission.READ_SETTINGS net.qihoo.launcher.permission.WRITE_SETTINGS org.adwfreak.launcher.permission.READ_SETTINGS org.adwfreak.launcher.permission.WRITE_SETTINGS org.adw.launcher_donut.permission.READ_SETTINGS org.adw.launcher_donut.permission.WRITE_SETTINGS com.huawei.launcher3.permission.READ_SETTINGS com.huawei.launcher3.permission.WRITE_SETTINGS com.fede.launcher.permission.READ_SETTINGS com.fede.launcher.permission.WRITE_SETTINGS com.sec.android.app.twlauncher.settings.READ_SETTINGS com.sec.android.app.twlauncher.settings.WRITE_SETTINGS com.anddoes.launcher.permission.READ_SETTINGS com.anddoes.launcher.permission.WRITE_SETTINGS com.tencent.qqlauncher.permission.READ_SETTINGS com.tencent.qqlauncher.permission.WRITE_SETTINGS com.huawei.launcher2.permission.READ_SETTINGS com.huawei.launcher2.permission.WRITE_SETTINGS com.android.mylauncher.permission.READ_SETTINGS com.android.mylauncher.permission.WRITE_SETTINGS com.ebproductions.android.launcher.permission.READ_SETTINGS com.ebproductions.android.launcher.permission.WRITE_SETTINGS com.oppo.launcher.permission.READ_SETTINGS com.oppo.launcher.permission.WRITE_SETTINGS com.lenovo.launcher.permission.READ_SETTINGS com.lenovo.launcher.permission.WRITE_SETTINGS com.huawei.android.launcher.permission.READ_SETTINGS com.huawei.android.launcher.permission.WRITE_SETTINGS telecom.mdesk.permission.READ_SETTINGS telecom.mdesk.permission.WRITE_SETTINGS dianxin.permission.ACCESS_LAUNCHER_DATA

Android Permissions

5f17fd98e3c3657b892296a39cf78037_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.RECEIVE_SMS

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.GET_TASKS

android.permission.WAKE_LOCK

android.permission.READ_LOGS

android.permission.WRITE_APN_SETTINGS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_SETTINGS

android.permission.BLUETOOTH

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.RESTART_PACKAGES

android.permission.GET_ACCOUNTS

com.android.launcher.permission.READ_SETTINGS

android.permission.DISABLE_KEYGUARD

android.permission.RECEIVE_WAP_PUSH

android.permission.READ_CONTACTS

android.permission.CHANGE_CONFIGURATION

android.permission.RUN_INSTRUMENTATION

android.webkit.permission.PLUGIN

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

com.android.launcher2.permission.READ_SETTINGS

com.android.launcher2.permission.WRITE_SETTINGS

com.android.launcher3.permission.READ_SETTINGS

com.android.launcher3.permission.WRITE_SETTINGS

org.adw.launcher.permission.READ_SETTINGS

org.adw.launcher.permission.WRITE_SETTINGS

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.WRITE_SETTINGS

com.qihoo360.launcher.permission.READ_SETTINGS

com.qihoo360.launcher.permission.WRITE_SETTINGS

com.lge.launcher.permission.READ_SETTINGS

com.lge.launcher.permission.WRITE_SETTINGS

net.qihoo.launcher.permission.READ_SETTINGS

net.qihoo.launcher.permission.WRITE_SETTINGS

5f17fd98e3c3657b892296a39cf78037_JaffaCakes118

com.regeemir.jeopar.LoadActivity

com.regeemir.jeopar.ScrollableTabHost

com.regeemir.jeopar.SelectActivity

com.regeemir.jeopar.YouKnowActivity

com.regeemir.jeopar.SelectMovieActivity

com.regeemir.jeopar.PlayVideoActivity

.HejuActivity

com.ehoo.tasks.other.PayResultActivity

com.skymobi.pay.sdk.normal.zimon.EpsActivity

com.alipay.sdk.app.H5PayActivity

com.ipaynow.plugin.inner_plugin.prepay_plugin.activity.PrePayActivity

com.ipaynow.plugin.inner_plugin.prepay_plugin.activity.NotifyActivity

com.unionpay.uppay.PayActivityEx

com.alipay.sdk.auth.AuthActivity

com.hft.wechat.HftWeChatActivity

com.heepay.plugin.activity.WeChatNotityActivity

com.unionpay.uppay.PayActivity

com.regeemir.jeopar.SpService

com.ehoo.sms.receiver.SMSReceiveService

com.skymobi.pay.sdk.normal.zimon.EpsService

com.skymobi.pay.sdk.normal.zimon.sms.PayCtrlService

com.skymobi.pay.sdk.normal.zimon.sms.SkyPayRemoteService

com.hzpz.pay.service.SmsPushReceiver

com.hzpz.pay.service.ConnectivityReceiver

com.ehoo.sms.receiver.BootReceiver

com.skymobi.pay.sdk.normal.zimon.EpsReceiver

com.skymobi.pay.appui_v1001.pl

com.skymobi.pay.plugin.main_v10011.pl

com.skymobi.pay.plugin.recordupload_v10009.pl

com.skymobi.pay.plugin.smspay_v10020.pl

skymobi_pay_wxplugin.apk

com.skymobi.pay.wxplugin.wxapi.WXPayEntryActivity

unicom_resource.dat

Sharing

Errors

General

Malware Config

Signatures

File Explorer

5f17fd98e3c3657b892296a39cf78037_JaffaCakes118

com.regeemir.jeopar.LoadActivity

com.regeemir.jeopar.ScrollableTabHost

com.regeemir.jeopar.SelectActivity

com.regeemir.jeopar.YouKnowActivity

com.regeemir.jeopar.SelectMovieActivity

com.regeemir.jeopar.PlayVideoActivity

.HejuActivity

com.ehoo.tasks.other.PayResultActivity

com.skymobi.pay.sdk.normal.zimon.EpsActivity

com.alipay.sdk.app.H5PayActivity

com.ipaynow.plugin.inner_plugin.prepay_plugin.activity.PrePayActivity

com.ipaynow.plugin.inner_plugin.prepay_plugin.activity.NotifyActivity

com.unionpay.uppay.PayActivityEx

com.alipay.sdk.auth.AuthActivity

com.hft.wechat.HftWeChatActivity

com.heepay.plugin.activity.WeChatNotityActivity

com.unionpay.uppay.PayActivity

com.regeemir.jeopar.SpService

com.ehoo.sms.receiver.SMSReceiveService

com.skymobi.pay.sdk.normal.zimon.EpsService

com.skymobi.pay.sdk.normal.zimon.sms.PayCtrlService

com.skymobi.pay.sdk.normal.zimon.sms.SkyPayRemoteService

com.hzpz.pay.service.SmsPushReceiver

com.hzpz.pay.service.ConnectivityReceiver

com.ehoo.sms.receiver.BootReceiver

com.skymobi.pay.sdk.normal.zimon.EpsReceiver

com.skymobi.pay.appui_v1001.pl

com.skymobi.pay.plugin.main_v10011.pl

com.skymobi.pay.plugin.recordupload_v10009.pl

com.skymobi.pay.plugin.smspay_v10020.pl

skymobi_pay_wxplugin.apk

com.skymobi.pay.wxplugin.wxapi.WXPayEntryActivity

unicom_resource.dat

Android Permissions

5f17fd98e3c3657b892296a39cf78037_JaffaCakes118