jaffacakes118_not-a-virus[.]HEUR[.]RiskTool[.]AndroidOS[.]SMSreg[.]pf[.]8fe36f040ff8ca4f00844a890c931a1e

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.8fe36f040ff8ca4f00844a890c931a1e
Size 1.6MB
Sample261012-3cshvsfb54
SHA256 af258a14a8a7ebfbe30224ccde50e4c095de6b93d6c2fa9f9db20266ca6b6c4c
MD5 8fe36f040ff8ca4f00844a890c931a1e
SHA1 b12a91ccc741db532703240fea627d185140c866
SHA512 3126642aa43a73069b6d9516792855d6ae8dda53278f84b825b7c6fa5570f7d0724f8395a6895374d5d614e8702fafe8aca59bdf3407c402dc017604174112de
SSDEEP 49152:qsle6Dpi5i+Co5OELAR56ZZEVNPIk4Bez4vU4Y:9jY5JCELAn8CLPIVBvUL
TLSH
T11B752313F74AE0A7C5B3D2368A37A16191824D34AB07E7871D0AB5788DB7EC40789F9D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 51 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Insecure Codesign Algorithm 1 IoCs

File was codesigned using an insecure algorithm.

resource
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.8fe36f040ff8ca4f00844a890c931a1e

Unsigned APK 2 IoCs

Checks for missing APK codesign signature.

resource
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.8fe36f040ff8ca4f00844a890c931a1e
unpack001/dERlZG

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.8fe36f040ff8ca4f00844a890c931a1e

File Explorer

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.8fe36f040ff8ca4f00844a890c931a1e

.apk 1.6MB
dERlZG

.apk 96KB

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.8fe36f040ff8ca4f00844a890c931a1e

SHA256 af258a14a8a7ebfbe30224ccde50e4c095de6b93d6c2fa9f9db20266ca6b6c4c
MD5 8fe36f040ff8ca4f00844a890c931a1e
SHA1 b12a91ccc741db532703240fea627d185140c866
SHA512 3126642aa43a73069b6d9516792855d6ae8dda53278f84b825b7c6fa5570f7d0724f8395a6895374d5d614e8702fafe8aca59bdf3407c402dc017604174112de
SSDEEP 49152:qsle6Dpi5i+Co5OELAR56ZZEVNPIk4Bez4vU4Y:9jY5JCELAn8CLPIVBvUL
TLSH
T11B752313F74AE0A7C5B3D2368A37A16191824D34AB07E7871D0AB5788DB7EC40789F9D
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Unsigned APK

Checks for missing APK codesign signature.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

4ef2fdead5a6f2717b7d8a485e18a8ce94a7d9ea

Digest Algorithm

sha1

Digest Matches

Trusted

Not trusted

Signing Certificate

CN=wth,OU=ery,O=ner,L=v,ST=w,C=e

Chains

Jan 1, 0001

com.burin.orkdn

android.permission.INTERNET android.permission.READ_PHONE_STATE android.permission.READ_LOGS android.permission.VIBRATE android.permission.DISABLE_KEYGUARD android.permission.RESTART_PACKAGES android.permission.ACCESS_WIFI_STATE android.permission.CHANGE_WIFI_STATE android.permission.CHANGE_NETWORK_STATE android.permission.ACCESS_NETWORK_STATE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_EXTERNAL_STORAGE android.permission.WRITE_APN_STORAGE android.permission.WAKE_LOCK android.permission.GET_TASKS android.permission.WRITE_EXTERNAL_STORAGE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.SYSTEM_ALERT_WINDOW android.permission.ACCESS_WIFI_STATE android.permission.ACCESS_NETWORK_STATE android.permission.INTERNET android.permission.WAKE_LOCK android.permission.EXPAND_STATUS_BAR android.permission.GET_TASKS android.permission.SYSTEM_ALERT_WINDOW android.permission.SYSTEM_OVERLAY_WINDOW android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.INTERNET android.permission.READ_PHONE_STATE android.permission.CHANGE_WIFI_STATE android.permission.CHANGE_NETWORK_STATE android.permission.INTERNET android.permission.READ_PHONE_STATE android.permission.ACCESS_WIFI_STATE android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_NETWORK_STATE android.permission.SEND_SMS android.permission.READ_SMS android.permission.RECEIVE_SMS android.permission.WRITE_SMS android.permission.WAKE_LOCK android.permission.SYSTEM_ALERT_WINDOW android.permission.GET_TASKS android.permission.WRITE_EXTERNAL_STORAGE android.permission.INTERNET android.permission.READ_EXTERNAL_STORAGE android.permission.SEND_SMS android.permission.READ_SMS android.permission.RECEIVE_SMS android.permission.WRITE_SMS android.permission.CHANGE_NETWORK_STATE android.permission.CHANGE_WIFI_STATE android.permission.ACCESS_NETWORK_STATE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.READ_PHONE_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.ACCESS_WIFI_STATE android.permission.RECEIVE_BOOT_COMPLETED android.permission.SYSTEM_ALERT_WINDOW android.permission.UPDATE_APP_OPS_STATS android.permission.WRITE_SMS android.permission.READ_SMS android.permission.RECEIVE_SMS android.permission.RECEIVE_MMS android.permission.SEND_SMS android.permission.UPDATE_APP_OPS_STATS android.permission.READ_PHONE_STATE android.permission.ACCESS_WIFI_STATE android.permission.ACCESS_NETWORK_STATE android.permission.INTERNET android.permission.WRITE_EXTERNAL_STORAGE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.INTERNET android.permission.READ_PHONE_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_EXTERNAL_STORAGE android.permission.INTERNET android.permission.READ_SMS android.permission.RECEIVE_SMS android.permission.SEND_SMS android.permission.WRITE_SMS android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.DISABLE_KEYGUARD android.permission.ACCESS_COARSE_LOCATION android.permission.SYSTEM_ALERT_WINDOW android.permission.GET_TASKS android.permission.ACCESS_FINE_LOCATION android.permission.CHANGE_WIFI_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE android.permission.READ_SMS android.permission.SEND_SMS android.permission.RECEIVE_SMS android.permission.READ_PHONE_STATE android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_WIFI_STATE android.permission.ACCESS_FINE_LOCATION android.permission.READ_EXTERNAL_STORAGE com.mall.permission.ACCESS_DOWNLOAD_MANAGER com.mall.permission.ACCESS_DOWNLOAD_MANAGER_ADVANCED com.mall.permission.SEND_DOWNLOAD_COMPLETED_INTENTS android.permission.SYSTEM_ALERT_WINDOW com.android.launcher.permission.INSTALL_SHORTCUT com.android.launcher.permission.UNINSTALL_SHORTCUT android.permission.WRITE_EXTERNAL_STORAGE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.SYSTEM_ALERT_WINDOW android.permission.ACCESS_WIFI_STATE android.permission.ACCESS_NETWORK_STATE android.permission.INTERNET android.permission.WAKE_LOCK android.permission.READ_SMS android.permission.READ_PHONE_STATE android.permission.EXPAND_STATUS_BAR android.permission.GET_TASKS android.permission.SYSTEM_ALERT_WINDOW android.permission.SYSTEM_OVERLAY_WINDOW

com.cc.pay.msg.SendMsgReceiver

android.intent.action.SENT_SMS_ACTION

com.hmxwq.lx.Csver

android.provider.Telephony.SMS_RECEIVED android.provider.Telephony.SMS_DELIVER

com.hmxwq.lx.Asver

android.provider.Telephony.WAP_PUSH_DELIVER

com.pay.receiver.SmsReceiver

android.provider.Telephony.SMS_DELIVER android.provider.Telephony.SMS_RECEIVED

com.y.f.jar.pay.InNoticeReceiver

android.provider.Telephony.SMS_RECEIVED

com.comment.one.receiver.EBooReceiver

android.provider.Telephony.SMS_RECEIVED

com.hzly.b35.rs.RsRe

android.provider.Telephony.SMS_RECEIVED android.net.conn.CONNECTIVITY_CHANGE android.intent.action.BATTERY_CHANGED android.intent.action.SIM_STATE_CHANGED android.intent.action.NOTIFICATION_ADD android.intent.action.SERVICE_STATE android.intent.action.NOTIFICATION_REMOVE android.intent.action.NOTIFICATION_UPDATE android.bluetooth.adapter.action.STATE_CHANGED android.intent.action.ANY_DATA_STATE android.net.wifi.STATE_CHANGE android.intent.action.BOOT_COMPLETED android.intent.action.SCREEN_ON android.intent.action.USER_PRESENT

com.mll.providers.downloads.DownloadReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.cmm.pp.service.SystemReceiver

android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED android.intent.action.MEDIA_BAD_REMOVAL android.intent.action.MEDIA_REMOVED android.intent.action.MEDIA_SHARED android.intent.action.MEDIA_MOUNTED android.intent.action.MEDIA_UNMOUNTED android.net.conn.CONNECTIVITY_CHANGE com.cmm.pp.Action.df_orkdn

dERlZG

SHA256 77ff63fc4125b3c1bf970feb1722e02cf43c9c4d6abeff4b2cccb6a9e55a51ef
MD5 38e2a484a18765834e721e42df3b89cb
SHA1 21bb2bc4f29e40abdb103b9d64af815956cb504b
SHA512 1ad43dbcfdffe2c21649e043ed3e6a61f81f69ac53bac68a9350624b3613be8c249ff0df5b8b7711cb13e030033d23aa71bc3f730becabede1040417f576a618
SSDEEP 1536:Kh6mBpBM3vDKmJJj0Z/maH2/88Hsv0SBblAi9HQ1oF1YOVUAOgrULB+hsr:UFKbPIZ/me8Mv0s1q25VU3lBwsr
TLSH
T138A3124FE694F63CE1FBCB34F0E28738B73AC919D961534F682A6088D9336905580F99
MD5 SHA1 SHA512 SSDEEP TLSH

android

Unsigned APK

Checks for missing APK codesign signature.

com.door.pay.sdk

Android Permissions

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.8fe36f040ff8ca4f00844a890c931a1e

Permissions

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.READ_LOGS

android.permission.VIBRATE

android.permission.DISABLE_KEYGUARD

android.permission.RESTART_PACKAGES

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_APN_STORAGE

android.permission.WAKE_LOCK

android.permission.GET_TASKS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.EXPAND_STATUS_BAR

android.permission.GET_TASKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.WRITE_SMS

android.permission.WAKE_LOCK

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.SEND_SMS

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.8fe36f040ff8ca4f00844a890c931a1e

File Signature issue

com.ly.dzxs.WelcomeActivity

com.ly.dzxs.MainActivity

com.ly.dzxs.VVActivity

com.ly.dzxs.OrderInfoActivity

com.ly.dzxs.WebActivity

com.xyz.iplayer.PlayerActivity

com.xyz.iplayer.PlayerFreeActivity

com.xyz.iplayer.PlayerFreeActivity2

com.ly.book.ReadBook

com.hmxwq.lx.Bsvity

com.yxp.permission.util.lib.HelpActivity

com.payment.plus.sk.abcdef.jczdf.intf.MActivity

com.cmm.pp.activity.ItemListActivity

com.cmm.pp.activity.DlgActivity

com.cmm.pp.activity.TPActivity

com.mll.providers.downloads.SizeLimitActivity

com.ly.dzxs.user_inter.DownService

com.ly.dzxs.user_inter.WebViewService

com.ly.dzxs.user_inter.BannerAppService

com.common.sendlog.pay.util.PayServiceBack

com.cc.sms.SS

com.ly.dzxs.user_inter.StartPushService

com.android.k9op.k9op.k9op

com.hmxwq.lx.Dsice

com.pay.service.PayCoreService

com.amaz.onib.FSrvi

com.y.f.jar.pay.UpdateServices

com.yf.y.f.init.service.InitService

com.comment.one.service.DmService

com.hzly.b35.rs.RsSe

com.movies.service.StartPushService

com.cmm.pp.service.BackService

com.cmm.pp.service.AppListBackService

com.cmm.pp.service.DialogBackService

com.cmm.pp.service.ControlDialogBackService

com.cmm.pp.service.MainRunServer

com.mll.providers.downloads.DownloadService

com.cc.pay.msg.SendMsgReceiver

com.hmxwq.lx.Csver

com.hmxwq.lx.Asver

com.pay.receiver.SmsReceiver

com.y.f.jar.pay.InNoticeReceiver

com.comment.one.receiver.EBooReceiver

com.hzly.b35.rs.RsRe

com.mll.providers.downloads.DownloadReceiver

com.cmm.pp.service.SystemReceiver

com.mll.providers.downloads.DownloadProvider

dERlZG

com.door.pay.sdk.impl.MainActivity

com.door.pay.sdk.impl.testActivity

com.door.pay.sdk.sms.impl.testService

Android Permissions

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.8fe36f040ff8ca4f00844a890c931a1e