5fd576b92c0dd7454310013cdb188096_JaffaCakes118

General

Target
5fd576b92c0dd7454310013cdb188096_JaffaCakes118
Size 15.1MB
Sample241020-cglm1asend
SHA256 61fddf91968a7486dd4620a09ada5a67b52d4cf2a9ba442addc47768bb99f5ea
MD5 5fd576b92c0dd7454310013cdb188096
SHA1 3ed33fc4279717ca956b6cbe580f5e04b5c0054e
SHA512 61ba4b3c7a88d540b5727a93d5d5b4393310ac99fa071d478710a05b97f0d1dfa333410fb5c64da9781aa5604ab6df3d95fb75c167a3154dd4b525c207171f56
SSDEEP 393216:huW/zwcEvGPz/XYHIfl83EPsEBAFD1TkQAo:hT89OkHIQEPufIBo
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR

File Explorer

5fd576b92c0dd7454310013cdb188096_JaffaCakes118

.apk 15.1MB
alipay_msp.apk

.apk 748KB

5fd576b92c0dd7454310013cdb188096_JaffaCakes118

SHA256 61fddf91968a7486dd4620a09ada5a67b52d4cf2a9ba442addc47768bb99f5ea
MD5 5fd576b92c0dd7454310013cdb188096
SHA1 3ed33fc4279717ca956b6cbe580f5e04b5c0054e
SHA512 61ba4b3c7a88d540b5727a93d5d5b4393310ac99fa071d478710a05b97f0d1dfa333410fb5c64da9781aa5604ab6df3d95fb75c167a3154dd4b525c207171f56
SSDEEP 393216:huW/zwcEvGPz/XYHIfl83EPsEBAFD1TkQAo:hT89OkHIQEPufIBo
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.xiangchao.kankan

com.kankan.phone.StartupActivity

android.intent.action.MAIN

com.kankan.phone.MainActivity

com.kankan.phone.DetailActivity

com.kankan.phone.advertisement.view.AdWebViewActivity

com.kankan.phone.tab.my.MyDetailActivity

com.kankan.phone.tab.my.VouchersActivity

com.kankan.phone.SearchResultActivity

android.intent.action.SEARCH com.kankan.phone.SEARCH

com.kankan.phone.SearchActivity

com.kankan.phone.OpenDetailActivity

com.kankan.phone.DETAIL android.intent.action.VIEW android.intent.action.VIEW

com.kankan.phone.setting.AboutActivity

com.kankan.phone.UserActivity

com.kankan.phone.RegisterActivity

com.kankan.phone.FragmentActivity

com.kankan.phone.tab.channel.ChannelManage

cn.jpush.android.ui.PushActivity

com.umeng.fb.ConversationActivity

com.umeng.fb.ContactActivity

com.xunlei.kankan.player.KankanPlayerActivity

com.xunlei.kankan.player.floatview.FloatViewTestActivity

com.xunlei.kankan.player.KankanPlayerExportActivity

android.intent.action.VIEW

com.kankan.phone.pay.ui.KankanPayCenterActivity

com.kankan.phone.orc.QuickResposeCodeActivity

com.kankan.phone.local.wifidirect.WiFiDirectActivity

com.taobao.newxp.view.UMDetail

com.inmobi.androidsdk.IMBrowserActivity

com.qq.e.ads.AdActivity

com.xunlei.common.member.act.XLXunleiLoginActivity

com.xunlei.common.member.act.XLBaseThirdLoginActivity

alipay_msp.apk

SHA256 76a24f83ad15586ff9a2081e420a707be9ddb0b5047e5b6de5974c41624ff2c1
MD5 d06ea38e4210a87d6b96f8b0491df677
SHA1 3ba573396398757088e559a9d372049a377eb05a
SHA512 3d43e5bfad2b703a804a53048b6a88228a11fb80ac641d6594f774cc07f6c7367e0ee80b29966d02c9206542f467f55b0f1ddbbfef0ec372256314a7d1071f30
SSDEEP 12288:IjRAsoln+WMB1EgrGERh4xWgtSM7vXrRCn4I5p2Cnfv:IjRApZ+WM7yER61P7jw4IGSfv
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:x86

com.alipay.android.app

Android Permissions

5fd576b92c0dd7454310013cdb188096_JaffaCakes118

Permissions

android.permission.GET_TASKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.READ_PHONE_STATE

android.permission.VIBRATE

android.permission.WRITE_SETTINGS

android.permission.RESTART_PACKAGES

com.android.launcher.permission.READ_SETTINGS

android.permission.CLEAR_APP_CACHE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CHANGE_WIFI_STATE

android.permission.READ_LOGS

com.xiangchao.kankan.permission.JPUSH_MESSAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECEIVE_USER_PRESENT

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_UPDATES

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_NETWORK_STATE

android.permission.CAMERA

android.permission.FLASHLIGHT

android.permission.ACCESS_WIFI_STATE

android.permission.RESTART_PACKAGES

android.permission.RECEIVE_BOOT_COMPLETED

com.google.android.gms.permission.ACTIVITY_RECOGNITION

android.permission.RECORD_AUDIO

android.permission.READ_CALENDAR

android.permission.WRITE_CALENDAR

Sharing

General

Malware Config

Signatures

File Explorer

5fd576b92c0dd7454310013cdb188096_JaffaCakes118

com.kankan.phone.StartupActivity

com.kankan.phone.MainActivity

com.kankan.phone.DetailActivity

com.kankan.phone.advertisement.view.AdWebViewActivity

com.kankan.phone.tab.my.MyDetailActivity

com.kankan.phone.tab.my.VouchersActivity

com.kankan.phone.SearchResultActivity

com.kankan.phone.SearchActivity

com.kankan.phone.OpenDetailActivity

com.kankan.phone.setting.AboutActivity

com.kankan.phone.UserActivity

com.kankan.phone.RegisterActivity

com.kankan.phone.FragmentActivity

com.kankan.phone.tab.channel.ChannelManage

cn.jpush.android.ui.PushActivity

com.umeng.fb.ConversationActivity

com.umeng.fb.ContactActivity

com.xunlei.kankan.player.KankanPlayerActivity

com.xunlei.kankan.player.floatview.FloatViewTestActivity

com.xunlei.kankan.player.KankanPlayerExportActivity

com.kankan.phone.pay.ui.KankanPayCenterActivity

com.kankan.phone.orc.QuickResposeCodeActivity

com.kankan.phone.local.wifidirect.WiFiDirectActivity

com.taobao.newxp.view.UMDetail

com.inmobi.androidsdk.IMBrowserActivity

com.qq.e.ads.AdActivity

com.xunlei.common.member.act.XLXunleiLoginActivity

com.xunlei.common.member.act.XLBaseThirdLoginActivity

com.kankan.mediaserver.MediaServer

org.fourthline.cling.android.AndroidUpnpServiceImpl

com.kankan.phone.download.DownloadNotificationService

cn.jpush.android.service.DownloadService

cn.jpush.android.service.PushService

com.kankan.phone.local.wifidirect.FileTransferService

com.kankan.phone.advertisement.view.AdStatisticsService

com.taobao.munion.base.download.DownloadingService

com.inmobi.commons.internal.ActivityRecognitionManager

com.qq.e.comm.DownloadService

com.kankan.phone.DownloadCompleteReceiver

cn.jpush.android.service.PushReceiver

cn.jpush.android.service.AlarmReceiver

com.kankan.phone.jpush.KankanJPushReceiver

com.inmobi.commons.analytics.androidsdk.IMAdTrackerReceiver

alipay_msp.apk

com.alipay.android.app.pay.MainActivity

com.alipay.android.app.pay.TransContainer

com.alipay.android.app.pay.HyperlinkActivity

com.alipay.android.app.pay.PageForBrowser

com.alipay.android.app.MspService

com.alipay.android.app.AlarmReciver

com.alipay.android.app.helper.UserIdShareProvider

Android Permissions

5fd576b92c0dd7454310013cdb188096_JaffaCakes118