6711179335785d00efc50eb1cdc62c26_JaffaCakes118

General

Target
6711179335785d00efc50eb1cdc62c26_JaffaCakes118
Size 480KB
Sample241021-wl132azerd
SHA256 b382a2b3ae4ae011d82a81e167438b2d519da42d21667726b9ed40d15f62d623
MD5 6711179335785d00efc50eb1cdc62c26
SHA1 84679eb207b45dd6705ef6e0c2fb83b0e302796c
SHA512 4940c890979f97c0cc77cbe1cd66cd83add837f8efd1066c6407b8ebb94573c213707f3f606bccf61d14b7ab160522894075f133c1b4b9887831b3ba2e9e0256
SSDEEP 12288:Bk1R12kVs8uSwW00bMe+fECqFbtnTFzYNf:BAR12muSB+lfNsbtTFkNf
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

File Explorer

6711179335785d00efc50eb1cdc62c26_JaffaCakes118

.apk 480KB

6711179335785d00efc50eb1cdc62c26_JaffaCakes118

SHA256 b382a2b3ae4ae011d82a81e167438b2d519da42d21667726b9ed40d15f62d623
MD5 6711179335785d00efc50eb1cdc62c26
SHA1 84679eb207b45dd6705ef6e0c2fb83b0e302796c
SHA512 4940c890979f97c0cc77cbe1cd66cd83add837f8efd1066c6407b8ebb94573c213707f3f606bccf61d14b7ab160522894075f133c1b4b9887831b3ba2e9e0256
SSDEEP 12288:Bk1R12kVs8uSwW00bMe+fECqFbtnTFzYNf:BAR12muSB+lfNsbtTFkNf
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.yxxinglin.xzid404111

Android Permissions

6711179335785d00efc50eb1cdc62c26_JaffaCakes118

Permissions

android.permission.VIBRATE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.DISABLE_KEYGUARD

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RESTART_PACKAGES

com.android.launcher.permission.READ_SETTINGS

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.GET_TASKS

android.permission.ACCESS_COARSE_LOCATION

android.permission.INTERACT_ACROSS_USERS_FULL

6711179335785d00efc50eb1cdc62c26_JaffaCakes118

com.oozhushou.activity.WelcomeActivity

com.oozhushou.activity.MainActivity

com.oozhushou.activity.WebViewActivity

com.oozhushou.activity.MoreActivity

com.oozhushou.activity.AboutActivity

com.oozhushou.activity.FeedbackActivity

com.oozhushou.activity.MyGameActivity

com.oozhushou.activity.PluginActivity

com.oozhushou.activity.ToolsActivity

com.oozhushou.activity.HistoryListActivity

com.oozhushou.activity.HistoryDetailActivity

com.oozhushou.activity.AppOrPlgDetailActivity

com.oozhushou.activity.CommonPluginCfgActivity

com.oozhushou.HHLoaderService2

com.oozhushou.HHLoaderService

com.oozhushou.eventreceiver.DownloadAllVerReceiver

com.oozhushou.eventreceiver.ApkInstallOrUnInstallReceiver

Sharing

General

Malware Config

Signatures

File Explorer

6711179335785d00efc50eb1cdc62c26_JaffaCakes118

com.oozhushou.activity.WelcomeActivity

com.oozhushou.activity.MainActivity

com.oozhushou.activity.WebViewActivity

com.oozhushou.activity.MoreActivity

com.oozhushou.activity.AboutActivity

com.oozhushou.activity.FeedbackActivity

com.oozhushou.activity.MyGameActivity

com.oozhushou.activity.PluginActivity

com.oozhushou.activity.ToolsActivity

com.oozhushou.activity.HistoryListActivity

com.oozhushou.activity.HistoryDetailActivity

com.oozhushou.activity.AppOrPlgDetailActivity

com.oozhushou.activity.CommonPluginCfgActivity

com.oozhushou.HHLoaderService2

com.oozhushou.HHLoaderService

com.oozhushou.eventreceiver.DownloadAllVerReceiver

com.oozhushou.eventreceiver.ApkInstallOrUnInstallReceiver

Android Permissions

6711179335785d00efc50eb1cdc62c26_JaffaCakes118