49813dea66420480e4e10a123a53f559_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
49813dea66420480e4e10a123a53f559_JaffaCakes118
Size 2.7MB
Sample240331-btwhasbc7s
SHA256 442d3fb99a211111ddc64ed58af40f9a2acafb57ec80e36723ac8457f3859e24
MD5 49813dea66420480e4e10a123a53f559
SHA1 c29f97939719e98f20ac84743139f243debf39d8
SHA512 be220e47a6d6c0d10a17e851f6f36e9a9ee42ae50551835c3a18b16c9f4d70fb29b194ec131424d7baccaeff9895ab544e4ad03d5e2ae5f7efa1ef6b7fcb7d1d
SSDEEP 49152:WZ47b6d1AoDzg5qipwRef/vuP//gdC/CNyCcaJgclzejTvGvHo356Xd:I47GAo/g51pwUf/vq2GCotaJvl8bSHoo
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS

File Explorer

49813dea66420480e4e10a123a53f559_JaffaCakes118

.apk 2.7MB

49813dea66420480e4e10a123a53f559_JaffaCakes118

SHA256 442d3fb99a211111ddc64ed58af40f9a2acafb57ec80e36723ac8457f3859e24
MD5 49813dea66420480e4e10a123a53f559
SHA1 c29f97939719e98f20ac84743139f243debf39d8
SHA512 be220e47a6d6c0d10a17e851f6f36e9a9ee42ae50551835c3a18b16c9f4d70fb29b194ec131424d7baccaeff9895ab544e4ad03d5e2ae5f7efa1ef6b7fcb7d1d
SSDEEP 49152:WZ47b6d1AoDzg5qipwRef/vuP//gdC/CNyCcaJgclzejTvGvHo356Xd:I47GAo/g51pwUf/vq2GCotaJvl8bSHoo
MD5 SHA1 SHA512 SSDEEP

android

com.health.other

com.rebuild.buffalo.LUmWzGcOmCmRjIaUqFjAhPp

com.rebuild.buffalo.rfkehjypo.wbydctxiwcfm

com.rebuild.buffalo.NEjYnZnSdSsYyZiGnXkQiKaRsEbEsAaSrOcJdQf

com.rebuild.buffalo.NMoYhRlQlMaAj

com.rebuild.buffalo.IArZhNsPxWqZqUeNuIbScDmDsUqMfEkZaKnElYbYdNh

com.google.android.gms.common.api.GoogleApiActivity

com.rebuild.buffalo.BQnIgNkIfKb

com.rebuild.buffalo.XXgOfYdZtTmDzZpDsCkZpBzNl

com.rebuild.buffalo.LIwBjHdNyBrKyYmKuIzMhAzXtWmZgAqDzAyLpSmUlShNgCiXrBuCcAq

com.rebuild.buffalo.QHbFtRlEpBpLkZcWtXaYzFzSdIyCkSfQsIbZaXyEwPfKrBmZz

com.rebuild.buffalo.hdcalam.oelv

com.rebuild.buffalo.RHqDmTaRaPgNxRdFoHsTyZnIgIxMlDkOeRo

com.rebuild.buffalo.HSsKpEcJdFfKkFuWgNuCgEa

com.rebuild.buffalo.fojprxhtqih

android.intent.action.SENDTO android.intent.action.SEND

com.rebuild.buffalo.BCiTtGaIuGdNrBcOhWsAfHwRlQsJnOuBbTaSqOpBaCyWfIiNf

com.rebuild.buffalo.NKhFbIzItToLyCmDaCxTwWkWwDaKcGpGmPa

com.rebuild.buffalo.UTkTbZoYtDzZoKkWjKqDxHh

com.rebuild.buffalo.WWmBhWtKpGmGfMo

com.rebuild.buffalo.XJnUjUcQxTiUmBiLxOpNdRpBqEbNnZdArEjFqIhQyBlKc

com.rebuild.buffalo.NOwUxWuUoPcBmWiTuPdMhUz

com.rebuild.buffalo.rfkehjypo.jcbaosvey

com.rebuild.buffalo.AYoLoOfYhEhGbKnRrYpIeRcWeNzQaLc

com.rebuild.buffalo.CJxXiLkApDjRhHyTzMhOsQuOjCqXwTxSjBfCeWeUoWjJs

com.rebuild.buffalo.rfkehjypo.rvyynytz

com.rebuild.buffalo.GKoTyTuAaGeXaQhNtEtUtDyIkNrJtDpBbKpApWa

com.rebuild.buffalo.SJkLaJyWxNjBoYdLn

com.rebuild.buffalo.cymmqu

android.intent.action.MAIN

com.rebuild.buffalo.ZYuTtYuRbIrLiCmIhUgJcAfEmFhGdTlDqKyNpZe

com.rebuild.buffalo.JGkSjOa

com.rebuild.buffalo.rfkehjypo.avhnwkmsjjswmrd

com.rebuild.buffalo.SNsAnXxMtJeKl

com.rebuild.buffalo.ICnPdGo

com.rebuild.buffalo.rfkehjypo.dfmn

com.rebuild.buffalo.OHiSdFkPcTuSoXoZaMxHnOeNeLpPzJyJiRqUnHuWb

com.rebuild.buffalo.IQcAcToAlRoCiGfGgHqMuOsWmHq

com.rebuild.buffalo.FFrIrGb

com.rebuild.buffalo.TDrUxFbIfMxOuMlKfGqTp

com.rebuild.buffalo.XAaXtMjWoDgTnBjHaWaMgTdIoDiHdLbTzKbZrDqIaJgAcHy

com.rebuild.buffalo.QBgYyGeElYcGkAsQwLeKbWuAsEtZmCaLo

com.rebuild.buffalo.ZQmCbHlMzHgYoGaIhFgWlOsDiCiGiRfFlDfYd

com.rebuild.buffalo.TQeQfZkKhEbNcTeDoYaTmAzHhXlRaTmIdLcMz

com.rebuild.buffalo.SYxOqKeQgJfZhPhMyOtYuWy

com.rebuild.buffalo.WIjEaIcMnGfRdLbMeEyPdBuQgEzOl

Android Permissions

49813dea66420480e4e10a123a53f559_JaffaCakes118

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECEIVE_SMS

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.GET_TASKS

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.READ_SMS

android.permission.QUERY_ALL_PACKAGES

android.permission.QUICKBOOT_POWERON

android.permission.SEND_SMS

android.permission.RECEIVE_LAUNCH_BROADCASTS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.DISABLE_KEYGUARD

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.READ_PHONE_NUMBERS

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.REQUEST_DELETE_PACKAGES

Sharing

General

Malware Config

Signatures

File Explorer

49813dea66420480e4e10a123a53f559_JaffaCakes118

com.rebuild.buffalo.LUmWzGcOmCmRjIaUqFjAhPp

com.rebuild.buffalo.rfkehjypo.wbydctxiwcfm

com.rebuild.buffalo.NEjYnZnSdSsYyZiGnXkQiKaRsEbEsAaSrOcJdQf

com.rebuild.buffalo.NMoYhRlQlMaAj

com.rebuild.buffalo.IArZhNsPxWqZqUeNuIbScDmDsUqMfEkZaKnElYbYdNh

com.google.android.gms.common.api.GoogleApiActivity

com.rebuild.buffalo.BQnIgNkIfKb

com.rebuild.buffalo.XXgOfYdZtTmDzZpDsCkZpBzNl

com.rebuild.buffalo.LIwBjHdNyBrKyYmKuIzMhAzXtWmZgAqDzAyLpSmUlShNgCiXrBuCcAq

com.rebuild.buffalo.QHbFtRlEpBpLkZcWtXaYzFzSdIyCkSfQsIbZaXyEwPfKrBmZz

com.rebuild.buffalo.hdcalam.oelv

com.rebuild.buffalo.RHqDmTaRaPgNxRdFoHsTyZnIgIxMlDkOeRo

com.rebuild.buffalo.HSsKpEcJdFfKkFuWgNuCgEa

com.rebuild.buffalo.fojprxhtqih

com.rebuild.buffalo.BCiTtGaIuGdNrBcOhWsAfHwRlQsJnOuBbTaSqOpBaCyWfIiNf

com.rebuild.buffalo.NKhFbIzItToLyCmDaCxTwWkWwDaKcGpGmPa

com.rebuild.buffalo.UTkTbZoYtDzZoKkWjKqDxHh

com.rebuild.buffalo.WWmBhWtKpGmGfMo

com.rebuild.buffalo.XJnUjUcQxTiUmBiLxOpNdRpBqEbNnZdArEjFqIhQyBlKc

com.rebuild.buffalo.NOwUxWuUoPcBmWiTuPdMhUz

com.rebuild.buffalo.rfkehjypo.jcbaosvey

com.rebuild.buffalo.AYoLoOfYhEhGbKnRrYpIeRcWeNzQaLc

com.rebuild.buffalo.CJxXiLkApDjRhHyTzMhOsQuOjCqXwTxSjBfCeWeUoWjJs

com.rebuild.buffalo.rfkehjypo.rvyynytz

com.rebuild.buffalo.GKoTyTuAaGeXaQhNtEtUtDyIkNrJtDpBbKpApWa

com.rebuild.buffalo.SJkLaJyWxNjBoYdLn

com.rebuild.buffalo.cymmqu

com.rebuild.buffalo.ZYuTtYuRbIrLiCmIhUgJcAfEmFhGdTlDqKyNpZe

com.rebuild.buffalo.JGkSjOa

com.rebuild.buffalo.rfkehjypo.avhnwkmsjjswmrd

com.rebuild.buffalo.SNsAnXxMtJeKl

com.rebuild.buffalo.ICnPdGo

com.rebuild.buffalo.rfkehjypo.dfmn

com.rebuild.buffalo.OHiSdFkPcTuSoXoZaMxHnOeNeLpPzJyJiRqUnHuWb

com.rebuild.buffalo.IQcAcToAlRoCiGfGgHqMuOsWmHq

com.rebuild.buffalo.FFrIrGb

com.rebuild.buffalo.TDrUxFbIfMxOuMlKfGqTp

com.rebuild.buffalo.XAaXtMjWoDgTnBjHaWaMgTdIoDiHdLbTzKbZrDqIaJgAcHy

com.rebuild.buffalo.QBgYyGeElYcGkAsQwLeKbWuAsEtZmCaLo

com.rebuild.buffalo.ZQmCbHlMzHgYoGaIhFgWlOsDiCiGiRfFlDfYd

com.rebuild.buffalo.TQeQfZkKhEbNcTeDoYaTmAzHhXlRaTmIdLcMz

com.rebuild.buffalo.SYxOqKeQgJfZhPhMyOtYuWy

com.rebuild.buffalo.WIjEaIcMnGfRdLbMeEyPdBuQgEzOl

com.rebuild.buffalo.smjotywnfwx.qflicixkddp

com.rebuild.buffalo.smjotywnfwx.mqwxfdszijeh

com.rebuild.buffalo.nmxp

com.rebuild.buffalo.smjotywnfwx.eekrbcbxkel

com.rebuild.buffalo.smjotywnfwx.ryysvtobjuyeg

com.rebuild.buffalo.smjotywnfwx.nyhjywnmbbwyzca

com.rebuild.buffalo.smjotywnfwx.wgelxoygfmkijaux

com.rebuild.buffalo.smjotywnfwx.oadjiago

com.rebuild.buffalo.hdcalam.uukcjjhtzw

com.rebuild.buffalo.ttihaurlqvcutbh

com.rebuild.buffalo.jbsycaztmmxe.prtwdjeugxatc

Android Permissions

49813dea66420480e4e10a123a53f559_JaffaCakes118