Overview

overview

6

Static

static

6

jaffacakes...pf.apk

android-9-x86

1

dERlZG.apk

android-9-x86

dERlZG.apk

android-10-x64

dERlZG.apk

android-11-x64

tongyu-pay-lib.apk

android-9-x86

tongyu-pay-lib.apk

android-10-x64

tongyu-pay-lib.apk

android-11-x64

Sharing

Copy URL Twitter E-mail

General

  • Target
    jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.f0798a70a69de988c7c02a969633cacd
  • Size 5.2MB
  • Sample261012-3pcceay13n
  • SHA256 71788385a1ef83966aec462ae5c6c5a0bcf358366a24463243e17e15561c7f21
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 15 IoCs
  • Insecure Codesign Algorithm 2 IoCs

    File was codesigned using an insecure algorithm.

  • Unsigned APK 2 IoCs

    Checks for missing APK codesign signature.

  • Untrusted Codesign Signers 2 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.f0798a70a69de988c7c02a969633cacd
    .apk 5.2MB
  • dERlZG
    .apk 102KB
  • tongyu-pay-lib.apk
    .apk 96KB

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.f0798a70a69de988c7c02a969633cacd

  • SHA256 71788385a1ef83966aec462ae5c6c5a0bcf358366a24463243e17e15561c7f21
  • MD5 SHA1 SHA512 SSDEEP TLSH
androidarch:arm

  • Insecure Codesign Algorithm

    File was codesigned using an insecure algorithm.

  • Unsigned APK

    Checks for missing APK codesign signature.

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
0f87671623bed5a5ce591e582004323b5e797167
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN='Windows',OU='tecentbaidu',O='alibaba',L='SZ',ST='GD',C='CN'
Chains

Jan 1, 0001

ause.AK.sdkje

Android Permissions

jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.f0798a70a69de988c7c02a969633cacd

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_MMS

android.permission.RECEIVE_SMS

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.DISABLE_KEYGUARD

android.permission.ACCESS_COARSE_LOCATION

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.DISABLE_KEYGUARD

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

android.permission.ACCESS_FINE_LOCATION

android.permission.WAKE_LOCK

android.permission.CHANGE_CONFIGURATION

android.permission.WRITE_SETTINGS

android.permission.VIBRATE

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.GET_ACCOUNTS

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.READ_SETTINGS

android.permission.READ_INTERNAL_STORAGE

android.permission.WRITE_SECURE_SETTINGS

android.permission.WRITE_APN_SETTINGS

android.permission.UPDATE_APP_OPS_STATS

android.permission.WRITE_INTERNAL_STORAGE

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.READ_CONTACTS

android.permission.READ_CALL_LOG

android.permission.READ_LOGS