503ea2607ee4bfd730bf44791b424e85_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
503ea2607ee4bfd730bf44791b424e85_JaffaCakes118
Size 2.6MB
Sample240331-hzev3agd48
SHA256 10b1594b87010c09acb393d457417c240dc1962371e37988a1c804e93870541f
MD5 503ea2607ee4bfd730bf44791b424e85
SHA1 401cc3e67142b771338bfdfa3970b4447a81dd06
SHA512 718b75a5807c59a72e6149d365c5c7d28f04a2e5a7176ec2991a5555d9b32580c9de9dd77f13284bdbb5275dd8381867b0df24b5fc6b7d9001e70b578cd0d443
SSDEEP 49152:Dk4sAvFygukFZacB61rbXjVF6XLxLFFOLMmr6cTsH+aZhT5qOkRCP:Dk9CygBZn01vXzI5XOoXcsH+gQOQi
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

File Explorer

503ea2607ee4bfd730bf44791b424e85_JaffaCakes118

.apk 2.6MB

503ea2607ee4bfd730bf44791b424e85_JaffaCakes118

SHA256 10b1594b87010c09acb393d457417c240dc1962371e37988a1c804e93870541f
MD5 503ea2607ee4bfd730bf44791b424e85
SHA1 401cc3e67142b771338bfdfa3970b4447a81dd06
SHA512 718b75a5807c59a72e6149d365c5c7d28f04a2e5a7176ec2991a5555d9b32580c9de9dd77f13284bdbb5275dd8381867b0df24b5fc6b7d9001e70b578cd0d443
SSDEEP 49152:Dk4sAvFygukFZacB61rbXjVF6XLxLFFOLMmr6cTsH+aZhT5qOkRCP:Dk9CygBZn01vXzI5XOoXcsH+gQOQi
MD5 SHA1 SHA512 SSDEEP

android

com.property.dress

com.famous.river.ZWeNgLl

com.famous.river.zvrvogcx.etbtisrmczucjs

com.famous.river.MTkUrUrNaZuZzGdTsZmApGpIaTbIcPxUjUdHoChMwPiPsBcQo

com.famous.river.AMsCcPzWdCmPbRmSoYlEgMnOtPa

com.google.android.gms.common.api.GoogleApiActivity

com.famous.river.AKbQxDiQdJbQlXlBcMmRhAsGwPsFbLnEjSuWjIe

com.famous.river.BMyChDlIwYdEjGjQqJzHpKjErDj

com.famous.river.ZUdKbDsZnKcRoQbJjFzCaPiMi

com.famous.river.ADrAaEyGiXkIwRoQaRjBrIlKzFqUjPh

com.famous.river.DPtJiBqMzSuGjWqYmTaUePeLqWjSuWoXzCfAjJyLz

com.famous.river.btxffetdjkwozm.eurashiazrv

com.famous.river.EDnDzIdBrHkTnKfCqOgRxTaPgLxAmWlXfRzYhEkQqSfQsOt

com.famous.river.KEqIrNlSnEdFoCiEeBrMiFiBaRlHr

com.famous.river.JXfEjGsXuIh

com.famous.river.PSaLlOhCiXoSgUsMwBd

com.famous.river.LYxGqIdBuSpTsZmJnJwNrLdTiKqDxLaAuRzOgCjKuJeJiLnRuRtMo

com.famous.river.mqdilrhlkwvyednh

android.intent.action.SENDTO android.intent.action.SEND

com.famous.river.ZTlAzBdHrHjTcOxFlFyJcPkNxJsJm

com.famous.river.EIiQfTlPtMbYyFsHeKmCcJaPlLiTg

com.famous.river.DLgNnJzChFi

com.famous.river.FNwDpDcPuIsYuZy

com.famous.river.SSeOyZmQrQrQmRgYcYfPnJhHcOdPg

com.famous.river.QEbPqAkGqDhSsXxNySdMmAkWtSiReJwJaOnYzAeAmEsJuEhTpQt

com.famous.river.HCwDoMeGwOoJoMeNtFzKjRiSuTeEaIkDzAwTfCxTkZkLj

com.famous.river.BLxDjJaPhOjMdLfJtMqKhZkGpWqFsGpZp

com.famous.river.zvrvogcx.rxsjobcjdlah

com.famous.river.JYgGhTqZxWhAhSuEsNuEpFcMyUl

com.famous.river.zvrvogcx.ekltwprna

com.famous.river.RYwYtQaQnNgIc

com.famous.river.GLqXyMiTuCkAzZo

com.famous.river.bncfxgf

android.intent.action.MAIN

com.famous.river.EXkMdNbMdYsLsKlNrZfRgDpEuZwLzKzHiRdWrFaQiObJtXx

com.famous.river.ZXrAhDpBwItTfMbGcNuYuMyNaDfBj

com.famous.river.zvrvogcx.nvxcn

com.famous.river.XUdZwGtToAuYsHcYqNjAfIdPbIbZsUaGmGjGuMrFzPuFdXnUnZhMqGw

com.famous.river.zvrvogcx.sshwkvmt

com.famous.river.YTpMkUlNqZgSyZuBzMqYbJxSsYmHfJzElMlSwJa

com.famous.river.ABnPuEbDaMxFwLiUmSzFf

com.famous.river.FJhMiXtDfGrEqUoJeQcBi

com.famous.river.SDyPnRfNfKxLoGtClNyEbYfEaTmMpKyQmDnIu

com.famous.river.NQoOnXbXmDe

com.famous.river.SOrZnLfUyNwNkJfRaBxCjFkAmOi

com.famous.river.OPyGmKmEzBzUjRzTiLh

com.famous.river.AHnKzPrZqSjWmGzWxDrKxZlOxQaLsCwZxZePp

com.famous.river.DKqBaPkHiNzOa

com.famous.river.HGeQjHnIdSaYhBnLyUyBcDnAsCkStWpHzAfXeDfAmBiRsQw

com.famous.river.OUjQdUxWyLiJnUj

Android Permissions

503ea2607ee4bfd730bf44791b424e85_JaffaCakes118

Permissions

android.permission.QUICKBOOT_POWERON

android.permission.ACCESS_WIFI_STATE

android.permission.SEND_SMS

android.permission.GET_TASKS

android.permission.CALL_PHONE

android.permission.DISABLE_KEYGUARD

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

android.permission.READ_CONTACTS

android.permission.READ_SMS

android.permission.READ_PHONE_NUMBERS

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.QUERY_ALL_PACKAGES

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECEIVE_SMS

android.permission.RECEIVE_LAUNCH_BROADCASTS

android.permission.INTERNET

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.RECEIVE_BOOT_COMPLETED

Sharing

General

Malware Config

Signatures

File Explorer

503ea2607ee4bfd730bf44791b424e85_JaffaCakes118

com.famous.river.ZWeNgLl

com.famous.river.zvrvogcx.etbtisrmczucjs

com.famous.river.MTkUrUrNaZuZzGdTsZmApGpIaTbIcPxUjUdHoChMwPiPsBcQo

com.famous.river.AMsCcPzWdCmPbRmSoYlEgMnOtPa

com.google.android.gms.common.api.GoogleApiActivity

com.famous.river.AKbQxDiQdJbQlXlBcMmRhAsGwPsFbLnEjSuWjIe

com.famous.river.BMyChDlIwYdEjGjQqJzHpKjErDj

com.famous.river.ZUdKbDsZnKcRoQbJjFzCaPiMi

com.famous.river.ADrAaEyGiXkIwRoQaRjBrIlKzFqUjPh

com.famous.river.DPtJiBqMzSuGjWqYmTaUePeLqWjSuWoXzCfAjJyLz

com.famous.river.btxffetdjkwozm.eurashiazrv

com.famous.river.EDnDzIdBrHkTnKfCqOgRxTaPgLxAmWlXfRzYhEkQqSfQsOt

com.famous.river.KEqIrNlSnEdFoCiEeBrMiFiBaRlHr

com.famous.river.JXfEjGsXuIh

com.famous.river.PSaLlOhCiXoSgUsMwBd

com.famous.river.LYxGqIdBuSpTsZmJnJwNrLdTiKqDxLaAuRzOgCjKuJeJiLnRuRtMo

com.famous.river.mqdilrhlkwvyednh

com.famous.river.ZTlAzBdHrHjTcOxFlFyJcPkNxJsJm

com.famous.river.EIiQfTlPtMbYyFsHeKmCcJaPlLiTg

com.famous.river.DLgNnJzChFi

com.famous.river.FNwDpDcPuIsYuZy

com.famous.river.SSeOyZmQrQrQmRgYcYfPnJhHcOdPg

com.famous.river.QEbPqAkGqDhSsXxNySdMmAkWtSiReJwJaOnYzAeAmEsJuEhTpQt

com.famous.river.HCwDoMeGwOoJoMeNtFzKjRiSuTeEaIkDzAwTfCxTkZkLj

com.famous.river.BLxDjJaPhOjMdLfJtMqKhZkGpWqFsGpZp

com.famous.river.zvrvogcx.rxsjobcjdlah

com.famous.river.JYgGhTqZxWhAhSuEsNuEpFcMyUl

com.famous.river.zvrvogcx.ekltwprna

com.famous.river.RYwYtQaQnNgIc

com.famous.river.GLqXyMiTuCkAzZo

com.famous.river.bncfxgf

com.famous.river.EXkMdNbMdYsLsKlNrZfRgDpEuZwLzKzHiRdWrFaQiObJtXx

com.famous.river.ZXrAhDpBwItTfMbGcNuYuMyNaDfBj

com.famous.river.zvrvogcx.nvxcn

com.famous.river.XUdZwGtToAuYsHcYqNjAfIdPbIbZsUaGmGjGuMrFzPuFdXnUnZhMqGw

com.famous.river.zvrvogcx.sshwkvmt

com.famous.river.YTpMkUlNqZgSyZuBzMqYbJxSsYmHfJzElMlSwJa

com.famous.river.ABnPuEbDaMxFwLiUmSzFf

com.famous.river.FJhMiXtDfGrEqUoJeQcBi

com.famous.river.SDyPnRfNfKxLoGtClNyEbYfEaTmMpKyQmDnIu

com.famous.river.NQoOnXbXmDe

com.famous.river.SOrZnLfUyNwNkJfRaBxCjFkAmOi

com.famous.river.OPyGmKmEzBzUjRzTiLh

com.famous.river.AHnKzPrZqSjWmGzWxDrKxZlOxQaLsCwZxZePp

com.famous.river.DKqBaPkHiNzOa

com.famous.river.HGeQjHnIdSaYhBnLyUyBcDnAsCkStWpHzAfXeDfAmBiRsQw

com.famous.river.OUjQdUxWyLiJnUj

com.famous.river.ljoae.fgu

com.famous.river.ljoae.lft

com.famous.river.jtjqxzgobtdpgqc

com.famous.river.ljoae.iurkmfwgc

com.famous.river.ljoae.thgapfhapwzwd

com.famous.river.ljoae.kjiihvfzceve

com.famous.river.ljoae.txcw

com.famous.river.ljoae.znraxircewkmgdfq

com.famous.river.btxffetdjkwozm.bkmopyfmgcwnkdku

com.famous.river.wjvvugh

com.famous.river.vxhtoafmgfjvrspg.zoogh

Android Permissions

503ea2607ee4bfd730bf44791b424e85_JaffaCakes118