ea911124defd4bf8d63aba29b0a04ed9_JaffaCakes118

General

Target
ea911124defd4bf8d63aba29b0a04ed9_JaffaCakes118
Size 4.3MB
Sample240410-jfml8sga85
SHA256 dad6cdcd782dc3daf5cf1dbdd82c58336af18b33a87be3f19b0833e547fe90a5
MD5 ea911124defd4bf8d63aba29b0a04ed9
SHA1 de6bdb3f1153e95fbf3b4aff904616ff8340e681
SHA512 1458992047473bdb3aed2e1db675495a2924e70d8ff087e487d140ffaa46c0bec78c0d30f96a24eba4aa09bfce81230e531af817e2ff5332bfe8b60e365a7cd0
SSDEEP 98304:qdK5aHKd+5ZEy/U8cZID5oLO50zISGdo/vIlZPB2S/kP8:2qdry88cm1ELmkvIlZPB258
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 13 IoCs

description	ioc
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

File Explorer

ea911124defd4bf8d63aba29b0a04ed9_JaffaCakes118

.apk 4.3MB

ea911124defd4bf8d63aba29b0a04ed9_JaffaCakes118

SHA256 dad6cdcd782dc3daf5cf1dbdd82c58336af18b33a87be3f19b0833e547fe90a5
MD5 ea911124defd4bf8d63aba29b0a04ed9
SHA1 de6bdb3f1153e95fbf3b4aff904616ff8340e681
SHA512 1458992047473bdb3aed2e1db675495a2924e70d8ff087e487d140ffaa46c0bec78c0d30f96a24eba4aa09bfce81230e531af817e2ff5332bfe8b60e365a7cd0
SSDEEP 98304:qdK5aHKd+5ZEy/U8cZID5oLO50zISGdo/vIlZPB2S/kP8:2qdry88cm1ELmkvIlZPB258
MD5 SHA1 SHA512 SSDEEP

android arch:x86 arch:x64 arch:arm arch:arm64

consult.steam.science

Android Permissions

ea911124defd4bf8d63aba29b0a04ed9_JaffaCakes118

Permissions

android.permission.REORDER_TASKS

android.permission.USE_FULL_SCREEN_INTENT

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.SEND_SMS

android.permission.READ_CONTACTS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.GET_ACCOUNTS

android.permission.RECORD_AUDIO

android.permission.DISABLE_KEYGUARD

android.permission.QUICKBOOT_POWERON

android.permission.READ_PHONE_NUMBERS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

android.permission.QUERY_ALL_PACKAGES

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.GET_TASKS

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_LAUNCH_BROADCASTS

ea911124defd4bf8d63aba29b0a04ed9_JaffaCakes118

autonomy.activity.economically.odkdibvz

com.google.android.gms.common.api.GoogleApiActivity

autonomy.activity.economically.xjmnnlq

autonomy.activity.economically.keq

autonomy.activity.economically.qkunlkdpd

autonomy.activity.economically.cseaoshqc

autonomy.activity.economically.mttshnpjtnh

autonomy.activity.economically.pefocegz

autonomy.activity.economically.sppe

autonomy.activity.economically.xlmmldl

autonomy.activity.economically.ofcjsh

autonomy.activity.economically.ediudjphz

autonomy.activity.economically.brdfskmwgfv

autonomy.activity.economically.dthydddpjzkt

autonomy.activity.economically.aikqv

autonomy.activity.economically.ktfsoynz

autonomy.activity.economically.pwzgvhsoqsuazkb

autonomy.activity.economically.voeegwjzkqu

autonomy.activity.economically.hqy

autonomy.activity.economically.fzrwkzcmkpexvxbi

autonomy.activity.economically.mrmpofeuiymglri

autonomy.activity.economically.uuphhwy

autonomy.activity.economically.tqvonoxthenbmwt

autonomy.activity.economically.bhfzhokdfxadyjai

autonomy.activity.economically.aad

autonomy.activity.economically.ddphyr

autonomy.activity.economically.ptwozaowkgmsij

autonomy.activity.economically.gwklyodgbzmy

autonomy.activity.economically.ygjdozl

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

ea911124defd4bf8d63aba29b0a04ed9_JaffaCakes118

autonomy.activity.economically.odkdibvz

com.google.android.gms.common.api.GoogleApiActivity

autonomy.activity.economically.xjmnnlq

autonomy.activity.economically.keq

autonomy.activity.economically.qkunlkdpd

autonomy.activity.economically.cseaoshqc

autonomy.activity.economically.mttshnpjtnh

autonomy.activity.economically.pefocegz

autonomy.activity.economically.sppe

autonomy.activity.economically.xlmmldl

autonomy.activity.economically.ofcjsh

autonomy.activity.economically.ediudjphz

autonomy.activity.economically.brdfskmwgfv

autonomy.activity.economically.dthydddpjzkt

autonomy.activity.economically.aikqv

autonomy.activity.economically.ktfsoynz

autonomy.activity.economically.pwzgvhsoqsuazkb

autonomy.activity.economically.voeegwjzkqu

autonomy.activity.economically.hqy

autonomy.activity.economically.fzrwkzcmkpexvxbi

autonomy.activity.economically.mrmpofeuiymglri

autonomy.activity.economically.uuphhwy

autonomy.activity.economically.tqvonoxthenbmwt

autonomy.activity.economically.bhfzhokdfxadyjai

autonomy.activity.economically.aad

autonomy.activity.economically.ddphyr

autonomy.activity.economically.ptwozaowkgmsij

autonomy.activity.economically.gwklyodgbzmy

autonomy.activity.economically.ygjdozl

Android Permissions

ea911124defd4bf8d63aba29b0a04ed9_JaffaCakes118