c05946a73facef6df631d6d550234fb0_JaffaCakes118

General

Target
c05946a73facef6df631d6d550234fb0_JaffaCakes118
Size 2.8MB
Sample240404-xswmkagc75
SHA256 e47462b6c50a6e16a1f1fc99f5c2c96a748296ec756144618215aebf1805ae3e
MD5 c05946a73facef6df631d6d550234fb0
SHA1 8fe54373dac56c98e6853e9df9e8ddb5fd5f74c8
SHA512 e71e45d93f924b55a15cd32e781dd778371a16b8badaef1725d6943196d3dfb0a0bbb87e18357ce241ef5856ee25c41c5bb4b2e2091c69975240a7330c9a390e
SSDEEP 49152:tMN9OzvpB6oRnnpRqsC6MA8wQeq883vQTUE+daQhVFHXL4jMUxNLds9tNgJjY:tsozT6kzqer8wW93+eLXNXLjUJ5s
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

File Explorer

c05946a73facef6df631d6d550234fb0_JaffaCakes118

.apk 2.8MB

c05946a73facef6df631d6d550234fb0_JaffaCakes118

SHA256 e47462b6c50a6e16a1f1fc99f5c2c96a748296ec756144618215aebf1805ae3e
MD5 c05946a73facef6df631d6d550234fb0
SHA1 8fe54373dac56c98e6853e9df9e8ddb5fd5f74c8
SHA512 e71e45d93f924b55a15cd32e781dd778371a16b8badaef1725d6943196d3dfb0a0bbb87e18357ce241ef5856ee25c41c5bb4b2e2091c69975240a7330c9a390e
SSDEEP 49152:tMN9OzvpB6oRnnpRqsC6MA8wQeq883vQTUE+daQhVFHXL4jMUxNLds9tNgJjY:tsozT6kzqer8wW93+eLXNXLjUJ5s
MD5 SHA1 SHA512 SSDEEP

android

com.liquid.injury

com.tail.task.UWlSsAiBsPlDyBkCtFcNdUyMwRrLpBxNjZwZaUqTcPhFlOtJeIxNg

com.tail.task.fdx.mwxcqebnl

com.tail.task.NBzDwPfNjLcPgBwGsDfJqCbAhUlOaHwQaTrQlKw

com.tail.task.HHfDzHmQtPzTqMhCaPeGyNtFiPhLuDnFnMnTpYjEqYxMsNp

com.google.android.gms.common.api.GoogleApiActivity

com.tail.task.DQdQwGjZrYqIbSyYjEpHzYkIa

com.tail.task.SSlDxRjBzZiQgRoHgXsOeBbHkJxMoQjHbWmYoQfUwTjTw

com.tail.task.hirlvqvr.arvln

com.tail.task.OIoBjAeIeCfQyXqIhIyWlOyFjPn

com.tail.task.CUcGkCkDaRmFhUxPiIaOcJgHa

com.tail.task.kwwpxzubjzujqua

android.intent.action.SENDTO android.intent.action.SEND

com.tail.task.IGkMlHfXbBwAlJlUcYyLhDeGzUiOs

com.tail.task.YCeIzHxPuZlXwNfExOjSeHaOdElDxPiEwRqLmQrFgEtYnDl

com.tail.task.UEnAlNcHtOpUzSaMfWoRmKd

com.tail.task.GYzMdRaKbTzMjStYbFeSyHeUnJyNhMdEz

com.tail.task.DKoXjAbOkLzIbAyKkNhZzSnWgJrItIc

com.tail.task.TOeEaEuHzQpFeZdBiNuPpMqKmUq

com.tail.task.fdx.wwxjvmr

com.tail.task.OEcAzDpYjWuZsXxOlMrPjWlEiMkIlSaSnFwAiCpIcTgJeKpXsMtSaFi

com.tail.task.RJjUnAaDmShDjFmMtZkHqFo

com.tail.task.fdx.yhn

com.tail.task.UHbXcZbMtJuBwBrBtBbSgBjOgTjNfZcTsGsMhGjLtFkEf

com.tail.task.osniarao

android.intent.action.MAIN

com.tail.task.IRwMfGpMbGgCeKd

com.tail.task.IEaLkBcLuUtEdIcKhEuTiKhTgGkFqMoDgJyRfAd

com.tail.task.fdx.ujz

com.tail.task.CQoAeElDm

com.tail.task.fdx.illz

com.tail.task.DZkOnWrTdQaDwLdYkRoKjGlNkGrZsOqWtDsNdSoTmHb

com.tail.task.XMlQhIdFrNxTiLyEuXfTb

com.tail.task.POhJfSpGjObMeElNtDlLlHnSnNlDlKlIiNfPyTfLxGgJuCaKuBaWx

com.tail.task.FFyBkZzSlAcDwNoGo

com.tail.task.DZrLaGnKq

com.tail.task.DLsSpHlNfBwPqSfFdRh

com.tail.task.WUaWtZpPlEqDm

com.tail.task.HWlAwYzRiNeCsLs

Android Permissions

c05946a73facef6df631d6d550234fb0_JaffaCakes118

Permissions

android.permission.QUERY_ALL_PACKAGES

android.permission.READ_CONTACTS

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.GET_TASKS

android.permission.READ_PHONE_STATE

android.permission.QUICKBOOT_POWERON

android.permission.DISABLE_KEYGUARD

android.permission.READ_SMS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

android.permission.WAKE_LOCK

android.permission.RECEIVE_LAUNCH_BROADCASTS

android.permission.RECEIVE_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SYSTEM_ALERT_WINDOW

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.READ_PHONE_NUMBERS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.CALL_PHONE

Sharing

General

Malware Config

Signatures

File Explorer

c05946a73facef6df631d6d550234fb0_JaffaCakes118

com.tail.task.UWlSsAiBsPlDyBkCtFcNdUyMwRrLpBxNjZwZaUqTcPhFlOtJeIxNg

com.tail.task.fdx.mwxcqebnl

com.tail.task.NBzDwPfNjLcPgBwGsDfJqCbAhUlOaHwQaTrQlKw

com.tail.task.HHfDzHmQtPzTqMhCaPeGyNtFiPhLuDnFnMnTpYjEqYxMsNp

com.google.android.gms.common.api.GoogleApiActivity

com.tail.task.DQdQwGjZrYqIbSyYjEpHzYkIa

com.tail.task.SSlDxRjBzZiQgRoHgXsOeBbHkJxMoQjHbWmYoQfUwTjTw

com.tail.task.hirlvqvr.arvln

com.tail.task.OIoBjAeIeCfQyXqIhIyWlOyFjPn

com.tail.task.CUcGkCkDaRmFhUxPiIaOcJgHa

com.tail.task.kwwpxzubjzujqua

com.tail.task.IGkMlHfXbBwAlJlUcYyLhDeGzUiOs

com.tail.task.YCeIzHxPuZlXwNfExOjSeHaOdElDxPiEwRqLmQrFgEtYnDl

com.tail.task.UEnAlNcHtOpUzSaMfWoRmKd

com.tail.task.GYzMdRaKbTzMjStYbFeSyHeUnJyNhMdEz

com.tail.task.DKoXjAbOkLzIbAyKkNhZzSnWgJrItIc

com.tail.task.TOeEaEuHzQpFeZdBiNuPpMqKmUq

com.tail.task.fdx.wwxjvmr

com.tail.task.OEcAzDpYjWuZsXxOlMrPjWlEiMkIlSaSnFwAiCpIcTgJeKpXsMtSaFi

com.tail.task.RJjUnAaDmShDjFmMtZkHqFo

com.tail.task.fdx.yhn

com.tail.task.UHbXcZbMtJuBwBrBtBbSgBjOgTjNfZcTsGsMhGjLtFkEf

com.tail.task.osniarao

com.tail.task.IRwMfGpMbGgCeKd

com.tail.task.IEaLkBcLuUtEdIcKhEuTiKhTgGkFqMoDgJyRfAd

com.tail.task.fdx.ujz

com.tail.task.CQoAeElDm

com.tail.task.fdx.illz

com.tail.task.DZkOnWrTdQaDwLdYkRoKjGlNkGrZsOqWtDsNdSoTmHb

com.tail.task.XMlQhIdFrNxTiLyEuXfTb

com.tail.task.POhJfSpGjObMeElNtDlLlHnSnNlDlKlIiNfPyTfLxGgJuCaKuBaWx

com.tail.task.FFyBkZzSlAcDwNoGo

com.tail.task.DZrLaGnKq

com.tail.task.DLsSpHlNfBwPqSfFdRh

com.tail.task.WUaWtZpPlEqDm

com.tail.task.HWlAwYzRiNeCsLs

com.tail.task.vnhesprcdshw.yatlfkollt

com.tail.task.vnhesprcdshw.lmqllahd

com.tail.task.shwmwxyhfv

com.tail.task.vnhesprcdshw.hcekazpcervbg

com.tail.task.vnhesprcdshw.kakbpnmx

com.tail.task.vnhesprcdshw.tiumm

com.tail.task.vnhesprcdshw.sgd

com.tail.task.vnhesprcdshw.ftq

com.tail.task.hirlvqvr.zlkkrezzfn

com.tail.task.fxjtynbpxhvljdf

com.tail.task.mihlimyhy.qoom

Android Permissions

c05946a73facef6df631d6d550234fb0_JaffaCakes118