ae81f90811749ff7fa5dd524bef3e50a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
ae81f90811749ff7fa5dd524bef3e50a_JaffaCakes118
Size 2.6MB
Sample240404-d6hhbadf3y
SHA256 9d8aee08d3e74c40e0c4bae1bfca12b4a3e35c4a44197d6ff0cae3811ed43927
MD5 ae81f90811749ff7fa5dd524bef3e50a
SHA1 fd88462e3c6369ace6eaef53170290fa753ad83f
SHA512 9a8bf5d87ab82521143d2e09f68c948f9e91ee6bf4224700c0e7be2d0a975348b564cdabfe3a053954b7d5839a2417762075d06492708e5ee9cf7750247d5407
SSDEEP 49152:tdtVtu+1bysjRG2sZnGUTINl96IMsjqR4HmMktOc8lyhfIEA8:jtVM+AsjRGHZDPIWUmMYL8lyfIn8
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

File Explorer

ae81f90811749ff7fa5dd524bef3e50a_JaffaCakes118

.apk 2.6MB

ae81f90811749ff7fa5dd524bef3e50a_JaffaCakes118

SHA256 9d8aee08d3e74c40e0c4bae1bfca12b4a3e35c4a44197d6ff0cae3811ed43927
MD5 ae81f90811749ff7fa5dd524bef3e50a
SHA1 fd88462e3c6369ace6eaef53170290fa753ad83f
SHA512 9a8bf5d87ab82521143d2e09f68c948f9e91ee6bf4224700c0e7be2d0a975348b564cdabfe3a053954b7d5839a2417762075d06492708e5ee9cf7750247d5407
SSDEEP 49152:tdtVtu+1bysjRG2sZnGUTINl96IMsjqR4HmMktOc8lyhfIEA8:jtVM+AsjRGHZDPIWUmMYL8lyfIn8
MD5 SHA1 SHA512 SSDEEP

android

com.settle.genius

com.alter.estate.WSfAjHuFuTaUxXoKxSxKmObOpHjHtUzCeEhIgSoYfOlFzRx

com.alter.estate.DXtAdIfYkAuSuCnNcYcJnWfRrOdSzRfQkFwDwTmOjTkBo

com.alter.estate.zepf.kydeuwcgyvimhqw

com.alter.estate.ORhKrWeRkYkKpMyCpCzJaQaDpYtQxLjJuSqDhJdEsAqCiUoLrEc

com.alter.estate.WLnRdBgNkJj

com.alter.estate.AQnUzUsZtXxOeUlHgDnHqHaGyFgYxDqXiHuUwAhStRdLkXqUeDc

com.alter.estate.YIlThOzHzCnRgXfAcUxEeYnPoBhWwGbYzIrMyFhUkKgSlJhHfUj

com.alter.estate.TJhQrByPtHaZaIrBh

com.google.android.gms.common.api.GoogleApiActivity

com.alter.estate.CKkXdQbZlCxHuJrQbEtJtUlNmOuWtLuWmBtLnFrCmCuFt

com.alter.estate.XTrTrFtMuZeRlAdHaJwToKtDfJrQxGgKd

com.alter.estate.TSwJmSsXbYdWjIfUrCbUcSsZkLfDnOwSzPxLt

com.alter.estate.PQfNkTfDpRbRqBhDcDjIrEeBfIlFtSbPfCiPdGbAbZaSj

com.alter.estate.bzcd.kuxhzjizpv

com.alter.estate.KZnXlDoPwHxQzPrDjIfUyGa

com.alter.estate.IYbAgLhAgUhGtLmZpWnWnMlPhPhGqSiMkBxFxWiFrGt

com.alter.estate.WIxPdUsNgOlGtHsJbKnCfUkDrTlShZbEwUsSxTiKuUlRpGpHyPn

com.alter.estate.DRpQpYfSeTwEsUgJxOhIoBjCdZhJu

com.alter.estate.LFwDuTpPpUgJeTcZfZwUqPdRoZdMsTnBx

com.alter.estate.kioebu

android.intent.action.SENDTO android.intent.action.SEND

com.alter.estate.FPfSjYzSpOtNqApJaGcJhIkMzPhScTwUrHcFcWzRuYaTnNeLlPsWm

com.alter.estate.BWcZzGxYdIfUuAuXxHqZgXdRtPeUeRiIdHa

com.alter.estate.AWsCxSqCyYaOhLfKoGm

com.alter.estate.SKiTiKt

com.alter.estate.zepf.yvzdzwcixfxlz

com.alter.estate.OHhAiMzHxZaPiWqUzBnBbHyHwEnFp

com.alter.estate.zepf.vxohdckivmqv

com.alter.estate.SKuOtBpEiMmMpDjOgIfTlRiCuGf

com.alter.estate.EGlSyJcWhKxFsDbPkJkRgClIgSbThCfNlRcQpSqHeWtQhUrQuLs

com.alter.estate.rvsifwwc

android.intent.action.MAIN

com.alter.estate.AXnOfXcFbFoTcUtUlHzAkJcUfSxIlOgYtWhHfGr

com.alter.estate.LXlWtHzIaPrQqOrZsPbYrKcMzGnEsOoHuSnUkGlGeWmQmHkQmBwKaKu

com.alter.estate.KIwCjHjDfTb

com.alter.estate.zepf.hldksapw

com.alter.estate.HRjIwQx

com.alter.estate.LZtNmXx

com.alter.estate.zepf.vlmujrmsqoqvss

com.alter.estate.LNtQuSkIiWmRdTwDwGaEjLwMtSoUbUqKxMcSsOoWlTyBsFpJh

com.alter.estate.PNiIlIlSuSgCsRbBgNlKgZfGpPhKnNpAoOgUzSs

com.alter.estate.HXoApYx

com.alter.estate.TEkElUtFuMoIyQfXf

com.alter.estate.XKrIjWpYfJtLnOo

com.alter.estate.CTaGdFqWgNyPbByJyGmNeIjMkNlGbYlMiSiRl

com.alter.estate.JDjIoKt

com.alter.estate.IMzZeEbLhChYiLpYdHtUtThSzIpEu

com.alter.estate.DZqWzToHxYpZoBbOo

com.alter.estate.FMcHeHqYsGkKkLpCqOwEfJlLdFiDjWtIgExKxEz

Android Permissions

ae81f90811749ff7fa5dd524bef3e50a_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.READ_CONTACTS

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.GET_TASKS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.QUERY_ALL_PACKAGES

android.permission.REQUEST_DELETE_PACKAGES

android.permission.QUICKBOOT_POWERON

android.permission.CALL_PHONE

android.permission.READ_SMS

android.permission.WAKE_LOCK

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECEIVE_LAUNCH_BROADCASTS

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

android.permission.DISABLE_KEYGUARD

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

Sharing

General

Malware Config

Signatures

File Explorer

ae81f90811749ff7fa5dd524bef3e50a_JaffaCakes118

com.alter.estate.WSfAjHuFuTaUxXoKxSxKmObOpHjHtUzCeEhIgSoYfOlFzRx

com.alter.estate.DXtAdIfYkAuSuCnNcYcJnWfRrOdSzRfQkFwDwTmOjTkBo

com.alter.estate.zepf.kydeuwcgyvimhqw

com.alter.estate.ORhKrWeRkYkKpMyCpCzJaQaDpYtQxLjJuSqDhJdEsAqCiUoLrEc

com.alter.estate.WLnRdBgNkJj

com.alter.estate.AQnUzUsZtXxOeUlHgDnHqHaGyFgYxDqXiHuUwAhStRdLkXqUeDc

com.alter.estate.YIlThOzHzCnRgXfAcUxEeYnPoBhWwGbYzIrMyFhUkKgSlJhHfUj

com.alter.estate.TJhQrByPtHaZaIrBh

com.google.android.gms.common.api.GoogleApiActivity

com.alter.estate.CKkXdQbZlCxHuJrQbEtJtUlNmOuWtLuWmBtLnFrCmCuFt

com.alter.estate.XTrTrFtMuZeRlAdHaJwToKtDfJrQxGgKd

com.alter.estate.TSwJmSsXbYdWjIfUrCbUcSsZkLfDnOwSzPxLt

com.alter.estate.PQfNkTfDpRbRqBhDcDjIrEeBfIlFtSbPfCiPdGbAbZaSj

com.alter.estate.bzcd.kuxhzjizpv

com.alter.estate.KZnXlDoPwHxQzPrDjIfUyGa

com.alter.estate.IYbAgLhAgUhGtLmZpWnWnMlPhPhGqSiMkBxFxWiFrGt

com.alter.estate.WIxPdUsNgOlGtHsJbKnCfUkDrTlShZbEwUsSxTiKuUlRpGpHyPn

com.alter.estate.DRpQpYfSeTwEsUgJxOhIoBjCdZhJu

com.alter.estate.LFwDuTpPpUgJeTcZfZwUqPdRoZdMsTnBx

com.alter.estate.kioebu

com.alter.estate.FPfSjYzSpOtNqApJaGcJhIkMzPhScTwUrHcFcWzRuYaTnNeLlPsWm

com.alter.estate.BWcZzGxYdIfUuAuXxHqZgXdRtPeUeRiIdHa

com.alter.estate.AWsCxSqCyYaOhLfKoGm

com.alter.estate.SKiTiKt

com.alter.estate.zepf.yvzdzwcixfxlz

com.alter.estate.OHhAiMzHxZaPiWqUzBnBbHyHwEnFp

com.alter.estate.zepf.vxohdckivmqv

com.alter.estate.SKuOtBpEiMmMpDjOgIfTlRiCuGf

com.alter.estate.EGlSyJcWhKxFsDbPkJkRgClIgSbThCfNlRcQpSqHeWtQhUrQuLs

com.alter.estate.rvsifwwc

com.alter.estate.AXnOfXcFbFoTcUtUlHzAkJcUfSxIlOgYtWhHfGr

com.alter.estate.LXlWtHzIaPrQqOrZsPbYrKcMzGnEsOoHuSnUkGlGeWmQmHkQmBwKaKu

com.alter.estate.KIwCjHjDfTb

com.alter.estate.zepf.hldksapw

com.alter.estate.HRjIwQx

com.alter.estate.LZtNmXx

com.alter.estate.zepf.vlmujrmsqoqvss

com.alter.estate.LNtQuSkIiWmRdTwDwGaEjLwMtSoUbUqKxMcSsOoWlTyBsFpJh

com.alter.estate.PNiIlIlSuSgCsRbBgNlKgZfGpPhKnNpAoOgUzSs

com.alter.estate.HXoApYx

com.alter.estate.TEkElUtFuMoIyQfXf

com.alter.estate.XKrIjWpYfJtLnOo

com.alter.estate.CTaGdFqWgNyPbByJyGmNeIjMkNlGbYlMiSiRl

com.alter.estate.JDjIoKt

com.alter.estate.IMzZeEbLhChYiLpYdHtUtThSzIpEu

com.alter.estate.DZqWzToHxYpZoBbOo

com.alter.estate.FMcHeHqYsGkKkLpCqOwEfJlLdFiDjWtIgExKxEz

com.alter.estate.mej.fjkirkd

com.alter.estate.mej.qwp

com.alter.estate.jvgcokpuq

com.alter.estate.mej.uaytaojixmbgnei

com.alter.estate.mej.hoeftsfg

com.alter.estate.mej.pppnsgkxgqicf

com.alter.estate.mej.cocxlhn

com.alter.estate.mej.pbgfo

com.alter.estate.bzcd.xofiqf

com.alter.estate.zidrdecmtfcyay

com.alter.estate.oepcb.kxdcowpwdzfk

Android Permissions

ae81f90811749ff7fa5dd524bef3e50a_JaffaCakes118