auto.tired.weasel.lsrojldwn
android.intent.action.SEND
android.intent.action.SENDTO
auto.tired.weasel.iiyxzobc
android.intent.action.MAIN
Resubmissions
09-04-2024 14:29
240409-rtpyhshd88 10Static task
static1
3 signatures
General
-
Target
ea32dfb83dff2f55084a22624077dd6e_JaffaCakes118
-
Size
3.4MB
-
MD5
ea32dfb83dff2f55084a22624077dd6e
-
SHA1
0b994725abc116f194007865b898e981f0b41e4d
-
SHA256
9b288f10d587a1390b422e385e7813b24f51b34304ac0585242b865a7a1b9be6
-
SHA512
4491c85229d063c6c63d2ccacb08505650030767237692ad06f3fc3a527296e06d8aed09c56088f38463b3ceb31d1cedb1f06eb5a823d194f2ffe16b16d1a779
-
SSDEEP
49152:yzLDYLv2hd/i4QILkJWy2m74Hy7FBIsa9URW5cMs0UpmWQXAfhkw1eD:N2T/2jJLHvP894FMZU4WwAbsD
Score
6/10
Malware Config
Signatures
-
Declares broadcast receivers with permission to handle system events 1 IoCs
description ioc Required by device admin receivers to bind with the system. Allows apps to manage device administration features. android.permission.BIND_DEVICE_ADMIN -
Declares services with permission to bind to the system 2 IoCs
description ioc Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device. android.permission.BIND_NOTIFICATION_LISTENER_SERVICE Required by accessibility services to bind with the system. Allows apps to access accessibility features. android.permission.BIND_ACCESSIBILITY_SERVICE -
Requests dangerous framework permissions 10 IoCs
description ioc Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows an application to record audio. android.permission.RECORD_AUDIO Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to receive SMS messages. android.permission.RECEIVE_SMS Allows an application to read SMS messages. android.permission.READ_SMS Allows an application to send SMS messages. android.permission.SEND_SMS Allows an application to read the user's contacts data. android.permission.READ_CONTACTS
Files
-
ea32dfb83dff2f55084a22624077dd6e_JaffaCakes118.apk android
pole.crumble.burden
auto.tired.weasel.iiyxzobc
Activities
Permissions
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.ACCESS_NETWORK_STATE
android.permission.GET_ACCOUNTS
android.permission.WAKE_LOCK
android.permission.CALL_PHONE
android.permission.USE_FULL_SCREEN_INTENT
android.permission.REQUEST_DELETE_PACKAGES
android.permission.READ_PHONE_STATE
android.permission.FOREGROUND_SERVICE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECORD_AUDIO
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.RECEIVE_SMS
android.permission.READ_SMS
android.permission.INTERNET
android.permission.SEND_SMS
android.permission.READ_CONTACTS
Receivers
auto.tired.weasel.ckxcpdgsxvtm
android.provider.Telephony.WAP_PUSH_DELIVER
auto.tired.weasel.fkjvbgibclbnu
android.app.action.DEVICE_ADMIN_DISABLED
android.app.action.ACTION_DEVICE_ADMIN_DISABLE_REQUESTED
android.app.action.DEVICE_ADMIN_ENABLED
auto.tired.weasel.zafiizrkir
android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
android.provider.Telephony.SMS_RECEIVED
com.htc.intent.action.QUICKBOOT_POWERON
android.intent.action.USER_PRESENT
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.provider.Telephony.SMS_DELIVER
Services
auto.tired.weasel.fkwabcsexqsun
android.service.notification.NotificationListenerService
auto.tired.weasel.qbbksdl
android.intent.action.RESPOND_VIA_MESSAGE
auto.tired.weasel.vnc
android.accessibilityservice.AccessibilityService
Android Permissions
ea32dfb83dff2f55084a22624077dd6e_JaffaCakes118
Permissions
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.ACCESS_NETWORK_STATE
android.permission.GET_ACCOUNTS
android.permission.WAKE_LOCK
android.permission.CALL_PHONE
android.permission.USE_FULL_SCREEN_INTENT
android.permission.REQUEST_DELETE_PACKAGES
android.permission.READ_PHONE_STATE
android.permission.FOREGROUND_SERVICE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECORD_AUDIO
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.RECEIVE_SMS
android.permission.READ_SMS
android.permission.INTERNET
android.permission.SEND_SMS
android.permission.READ_CONTACTS