jaffacakes118_not-a-virus[.]HEUR[.]RiskTool[.]AndroidOS[.]SMSreg[.]pf[.]4b9ed2b2f56959f26f63a87314c879a1

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.4b9ed2b2f56959f26f63a87314c879a1
Size 1.6MB
Sample261012-2243hsssft
SHA256 ed760bd5cb984ec33782f3724b1882e5d6adb8418214ba4a110f628080d1cdef
MD5 4b9ed2b2f56959f26f63a87314c879a1
SHA1 97f010c02d828277d8c2635c9eeab982b61dd1f6
SHA512 b514952de6d671093e90e6f93a835c71e60df7fe60df53e4bf3966d91f4bb2c4e36ba7a411a41687ef3560a6196aef88608331b5dafaa034dd21c1211936885b
SSDEEP 49152:hsqXjDUmTd2gwsnh7TFWImXcM6wR+eeRH2ThTH:7zQYd2a1Fzyn6K+J2Th7
TLSH
T14F752223E709E8A7C4B396328A75A221B0E15C705707E7575E04B1BC8EBBDC45BD9F88
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 51 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Insecure Codesign Algorithm 1 IoCs

File was codesigned using an insecure algorithm.

resource
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.4b9ed2b2f56959f26f63a87314c879a1

Unsigned APK 2 IoCs

Checks for missing APK codesign signature.

resource
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.4b9ed2b2f56959f26f63a87314c879a1
unpack001/dERlZG

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.4b9ed2b2f56959f26f63a87314c879a1

File Explorer

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.4b9ed2b2f56959f26f63a87314c879a1

.apk 1.6MB
dERlZG

.apk 96KB

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.4b9ed2b2f56959f26f63a87314c879a1

SHA256 ed760bd5cb984ec33782f3724b1882e5d6adb8418214ba4a110f628080d1cdef
MD5 4b9ed2b2f56959f26f63a87314c879a1
SHA1 97f010c02d828277d8c2635c9eeab982b61dd1f6
SHA512 b514952de6d671093e90e6f93a835c71e60df7fe60df53e4bf3966d91f4bb2c4e36ba7a411a41687ef3560a6196aef88608331b5dafaa034dd21c1211936885b
SSDEEP 49152:hsqXjDUmTd2gwsnh7TFWImXcM6wR+eeRH2ThTH:7zQYd2a1Fzyn6K+J2Th7
TLSH
T14F752223E709E8A7C4B396328A75A221B0E15C705707E7575E04B1BC8EBBDC45BD9F88
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Unsigned APK

Checks for missing APK codesign signature.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

8534f1bccb67cc651d7a59e77d1149c7bbd2dee3

Digest Algorithm

sha1

Digest Matches

Trusted

Not trusted

Signing Certificate

CN=wth,OU=ery,O=ner,L=v,ST=w,C=e

Chains

Jan 1, 0001

com.urjma.rosnd

android.permission.INTERNET android.permission.READ_PHONE_STATE android.permission.READ_LOGS android.permission.VIBRATE android.permission.DISABLE_KEYGUARD android.permission.RESTART_PACKAGES android.permission.ACCESS_WIFI_STATE android.permission.CHANGE_WIFI_STATE android.permission.CHANGE_NETWORK_STATE android.permission.ACCESS_NETWORK_STATE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_EXTERNAL_STORAGE android.permission.WRITE_APN_STORAGE android.permission.WAKE_LOCK android.permission.GET_TASKS android.permission.WRITE_EXTERNAL_STORAGE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.SYSTEM_ALERT_WINDOW android.permission.ACCESS_WIFI_STATE android.permission.ACCESS_NETWORK_STATE android.permission.INTERNET android.permission.WAKE_LOCK android.permission.EXPAND_STATUS_BAR android.permission.GET_TASKS android.permission.SYSTEM_ALERT_WINDOW android.permission.SYSTEM_OVERLAY_WINDOW android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.INTERNET android.permission.READ_PHONE_STATE android.permission.CHANGE_WIFI_STATE android.permission.CHANGE_NETWORK_STATE android.permission.INTERNET android.permission.READ_PHONE_STATE android.permission.ACCESS_WIFI_STATE android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_NETWORK_STATE android.permission.SEND_SMS android.permission.READ_SMS android.permission.RECEIVE_SMS android.permission.WRITE_SMS android.permission.WAKE_LOCK android.permission.SYSTEM_ALERT_WINDOW android.permission.GET_TASKS android.permission.WRITE_EXTERNAL_STORAGE android.permission.INTERNET android.permission.READ_EXTERNAL_STORAGE android.permission.SEND_SMS android.permission.READ_SMS android.permission.RECEIVE_SMS android.permission.WRITE_SMS android.permission.CHANGE_NETWORK_STATE android.permission.CHANGE_WIFI_STATE android.permission.ACCESS_NETWORK_STATE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.READ_PHONE_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.ACCESS_WIFI_STATE android.permission.RECEIVE_BOOT_COMPLETED android.permission.SYSTEM_ALERT_WINDOW android.permission.UPDATE_APP_OPS_STATS android.permission.WRITE_SMS android.permission.READ_SMS android.permission.RECEIVE_SMS android.permission.RECEIVE_MMS android.permission.SEND_SMS android.permission.UPDATE_APP_OPS_STATS android.permission.READ_PHONE_STATE android.permission.ACCESS_WIFI_STATE android.permission.ACCESS_NETWORK_STATE android.permission.INTERNET android.permission.WRITE_EXTERNAL_STORAGE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.INTERNET android.permission.READ_PHONE_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_EXTERNAL_STORAGE android.permission.INTERNET android.permission.READ_SMS android.permission.RECEIVE_SMS android.permission.SEND_SMS android.permission.WRITE_SMS android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.DISABLE_KEYGUARD android.permission.ACCESS_COARSE_LOCATION android.permission.SYSTEM_ALERT_WINDOW android.permission.GET_TASKS android.permission.ACCESS_FINE_LOCATION android.permission.CHANGE_WIFI_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE android.permission.READ_SMS android.permission.SEND_SMS android.permission.RECEIVE_SMS android.permission.READ_PHONE_STATE android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_WIFI_STATE android.permission.ACCESS_FINE_LOCATION android.permission.READ_EXTERNAL_STORAGE com.mall.permission.ACCESS_DOWNLOAD_MANAGER com.mall.permission.ACCESS_DOWNLOAD_MANAGER_ADVANCED com.mall.permission.SEND_DOWNLOAD_COMPLETED_INTENTS android.permission.SYSTEM_ALERT_WINDOW com.android.launcher.permission.INSTALL_SHORTCUT com.android.launcher.permission.UNINSTALL_SHORTCUT android.permission.WRITE_EXTERNAL_STORAGE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.SYSTEM_ALERT_WINDOW android.permission.ACCESS_WIFI_STATE android.permission.ACCESS_NETWORK_STATE android.permission.INTERNET android.permission.WAKE_LOCK android.permission.READ_SMS android.permission.READ_PHONE_STATE android.permission.EXPAND_STATUS_BAR android.permission.GET_TASKS android.permission.SYSTEM_ALERT_WINDOW android.permission.SYSTEM_OVERLAY_WINDOW

com.cc.pay.msg.SendMsgReceiver

android.intent.action.SENT_SMS_ACTION

com.hmxwq.lx.Csver

android.provider.Telephony.SMS_RECEIVED android.provider.Telephony.SMS_DELIVER

com.hmxwq.lx.Asver

android.provider.Telephony.WAP_PUSH_DELIVER

com.pay.receiver.SmsReceiver

android.provider.Telephony.SMS_DELIVER android.provider.Telephony.SMS_RECEIVED

com.y.f.jar.pay.InNoticeReceiver

android.provider.Telephony.SMS_RECEIVED

com.comment.one.receiver.EBooReceiver

android.provider.Telephony.SMS_RECEIVED

com.hzly.b35.rs.RsRe

android.provider.Telephony.SMS_RECEIVED android.net.conn.CONNECTIVITY_CHANGE android.intent.action.BATTERY_CHANGED android.intent.action.SIM_STATE_CHANGED android.intent.action.NOTIFICATION_ADD android.intent.action.SERVICE_STATE android.intent.action.NOTIFICATION_REMOVE android.intent.action.NOTIFICATION_UPDATE android.bluetooth.adapter.action.STATE_CHANGED android.intent.action.ANY_DATA_STATE android.net.wifi.STATE_CHANGE android.intent.action.BOOT_COMPLETED android.intent.action.SCREEN_ON android.intent.action.USER_PRESENT

com.mll.providers.downloads.DownloadReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.cmm.pp.service.SystemReceiver

android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED android.intent.action.MEDIA_BAD_REMOVAL android.intent.action.MEDIA_REMOVED android.intent.action.MEDIA_SHARED android.intent.action.MEDIA_MOUNTED android.intent.action.MEDIA_UNMOUNTED android.net.conn.CONNECTIVITY_CHANGE com.cmm.pp.Action.df_rosnd

dERlZG

SHA256 77ff63fc4125b3c1bf970feb1722e02cf43c9c4d6abeff4b2cccb6a9e55a51ef
MD5 38e2a484a18765834e721e42df3b89cb
SHA1 21bb2bc4f29e40abdb103b9d64af815956cb504b
SHA512 1ad43dbcfdffe2c21649e043ed3e6a61f81f69ac53bac68a9350624b3613be8c249ff0df5b8b7711cb13e030033d23aa71bc3f730becabede1040417f576a618
SSDEEP 1536:Kh6mBpBM3vDKmJJj0Z/maH2/88Hsv0SBblAi9HQ1oF1YOVUAOgrULB+hsr:UFKbPIZ/me8Mv0s1q25VU3lBwsr
TLSH
T138A3124FE694F63CE1FBCB34F0E28738B73AC919D961534F682A6088D9336905580F99
MD5 SHA1 SHA512 SSDEEP TLSH

android

Unsigned APK

Checks for missing APK codesign signature.

com.door.pay.sdk

Android Permissions

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.4b9ed2b2f56959f26f63a87314c879a1

Permissions

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.READ_LOGS

android.permission.VIBRATE

android.permission.DISABLE_KEYGUARD

android.permission.RESTART_PACKAGES

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_APN_STORAGE

android.permission.WAKE_LOCK

android.permission.GET_TASKS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.EXPAND_STATUS_BAR

android.permission.GET_TASKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.WRITE_SMS

android.permission.WAKE_LOCK

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.SEND_SMS

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.4b9ed2b2f56959f26f63a87314c879a1

File Signature issue

com.ly.dzxs.WelcomeActivity

com.ly.dzxs.MainActivity

com.ly.dzxs.VVActivity

com.ly.dzxs.OrderInfoActivity

com.ly.dzxs.WebActivity

com.xyz.iplayer.PlayerActivity

com.xyz.iplayer.PlayerFreeActivity

com.xyz.iplayer.PlayerFreeActivity2

com.ly.book.ReadBook

com.hmxwq.lx.Bsvity

com.yxp.permission.util.lib.HelpActivity

com.payment.plus.sk.abcdef.jczdf.intf.MActivity

com.cmm.pp.activity.ItemListActivity

com.cmm.pp.activity.DlgActivity

com.cmm.pp.activity.TPActivity

com.mll.providers.downloads.SizeLimitActivity

com.ly.dzxs.user_inter.DownService

com.ly.dzxs.user_inter.WebViewService

com.ly.dzxs.user_inter.BannerAppService

com.common.sendlog.pay.util.PayServiceBack

com.cc.sms.SS

com.ly.dzxs.user_inter.StartPushService

com.android.k9op.k9op.k9op

com.hmxwq.lx.Dsice

com.pay.service.PayCoreService

com.amaz.onib.FSrvi

com.y.f.jar.pay.UpdateServices

com.yf.y.f.init.service.InitService

com.comment.one.service.DmService

com.hzly.b35.rs.RsSe

com.movies.service.StartPushService

com.cmm.pp.service.BackService

com.cmm.pp.service.AppListBackService

com.cmm.pp.service.DialogBackService

com.cmm.pp.service.ControlDialogBackService

com.cmm.pp.service.MainRunServer

com.mll.providers.downloads.DownloadService

com.cc.pay.msg.SendMsgReceiver

com.hmxwq.lx.Csver

com.hmxwq.lx.Asver

com.pay.receiver.SmsReceiver

com.y.f.jar.pay.InNoticeReceiver

com.comment.one.receiver.EBooReceiver

com.hzly.b35.rs.RsRe

com.mll.providers.downloads.DownloadReceiver

com.cmm.pp.service.SystemReceiver

com.mll.providers.downloads.DownloadProvider

dERlZG

com.door.pay.sdk.impl.MainActivity

com.door.pay.sdk.impl.testActivity

com.door.pay.sdk.sms.impl.testService

Android Permissions

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.4b9ed2b2f56959f26f63a87314c879a1