f505a92ec494fcb1bfeddd0a76b922af_JaffaCakes118

General

Target
f505a92ec494fcb1bfeddd0a76b922af_JaffaCakes118
Size 4.2MB
Sample240417-ex7arade96
SHA256 f96fe97104d33743f476e7b3c5bbd1f5cced9bfa4837bab347c46e4eaf3309ea
MD5 f505a92ec494fcb1bfeddd0a76b922af
SHA1 7d96dd3fb13ad5e54c32b8af9e689547befad53a
SHA512 d78c9a5a892920786edb478522fca913f9f0da88e1c342ce378e580f693cf0bbac42d3e479a9ca5887c32dd2ae0d858cf67450f79d43ab22395ffc5b9ec9165f
SSDEEP 98304:DWe/Oh4YWVQv413RpujwQTavY3qIH3u50jISGjE5fmo7:CKM4nHLpus+GobR7
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to record audio.	android.permission.RECORD_AUDIO

File Explorer

f505a92ec494fcb1bfeddd0a76b922af_JaffaCakes118

.apk 4.2MB

f505a92ec494fcb1bfeddd0a76b922af_JaffaCakes118

SHA256 f96fe97104d33743f476e7b3c5bbd1f5cced9bfa4837bab347c46e4eaf3309ea
MD5 f505a92ec494fcb1bfeddd0a76b922af
SHA1 7d96dd3fb13ad5e54c32b8af9e689547befad53a
SHA512 d78c9a5a892920786edb478522fca913f9f0da88e1c342ce378e580f693cf0bbac42d3e479a9ca5887c32dd2ae0d858cf67450f79d43ab22395ffc5b9ec9165f
SSDEEP 98304:DWe/Oh4YWVQv413RpujwQTavY3qIH3u50jISGjE5fmo7:CKM4nHLpus+GobR7
MD5 SHA1 SHA512 SSDEEP

android arch:x86 arch:x64 arch:arm arch:arm64

republic.publish.nearby

Android Permissions

f505a92ec494fcb1bfeddd0a76b922af_JaffaCakes118

Permissions

android.permission.REORDER_TASKS

android.permission.USE_FULL_SCREEN_INTENT

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.SEND_SMS

android.permission.READ_CONTACTS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.GET_ACCOUNTS

android.permission.RECORD_AUDIO

f505a92ec494fcb1bfeddd0a76b922af_JaffaCakes118

golden.gradually.adequate.kcx

com.google.android.gms.common.api.GoogleApiActivity

golden.gradually.adequate.tqgogajoqbql

golden.gradually.adequate.glcvgtjjae

golden.gradually.adequate.wfnbmedfz

golden.gradually.adequate.zkk

golden.gradually.adequate.zpakpvaioh

golden.gradually.adequate.vcdvznfoctuvchn

golden.gradually.adequate.njfrgwkdttfuyc

golden.gradually.adequate.csukxo

golden.gradually.adequate.qrpgwvprwqceuy

golden.gradually.adequate.zalejqgpbbcqwczp

golden.gradually.adequate.beuvkznnah

golden.gradually.adequate.kbjgafrojnwzdqx

golden.gradually.adequate.ciej

golden.gradually.adequate.tfbwoc

golden.gradually.adequate.tnwr

golden.gradually.adequate.zemmxendiq

golden.gradually.adequate.vfnmexmxmnvfm

golden.gradually.adequate.hvfpv

golden.gradually.adequate.lincticfrttvblaj

golden.gradually.adequate.rssctqa

golden.gradually.adequate.azgq

golden.gradually.adequate.ctbqsqvceqec

golden.gradually.adequate.qxjf

golden.gradually.adequate.bwcjrlwux

golden.gradually.adequate.gtiwok

golden.gradually.adequate.zkedmgwl

golden.gradually.adequate.ckyhqwz

Sharing

General

Malware Config

Signatures

File Explorer

f505a92ec494fcb1bfeddd0a76b922af_JaffaCakes118

golden.gradually.adequate.kcx

com.google.android.gms.common.api.GoogleApiActivity

golden.gradually.adequate.tqgogajoqbql

golden.gradually.adequate.glcvgtjjae

golden.gradually.adequate.wfnbmedfz

golden.gradually.adequate.zkk

golden.gradually.adequate.zpakpvaioh

golden.gradually.adequate.vcdvznfoctuvchn

golden.gradually.adequate.njfrgwkdttfuyc

golden.gradually.adequate.csukxo

golden.gradually.adequate.qrpgwvprwqceuy

golden.gradually.adequate.zalejqgpbbcqwczp

golden.gradually.adequate.beuvkznnah

golden.gradually.adequate.kbjgafrojnwzdqx

golden.gradually.adequate.ciej

golden.gradually.adequate.tfbwoc

golden.gradually.adequate.tnwr

golden.gradually.adequate.zemmxendiq

golden.gradually.adequate.vfnmexmxmnvfm

golden.gradually.adequate.hvfpv

golden.gradually.adequate.lincticfrttvblaj

golden.gradually.adequate.rssctqa

golden.gradually.adequate.azgq

golden.gradually.adequate.ctbqsqvceqec

golden.gradually.adequate.qxjf

golden.gradually.adequate.bwcjrlwux

golden.gradually.adequate.gtiwok

golden.gradually.adequate.zkedmgwl

golden.gradually.adequate.ckyhqwz

Android Permissions

f505a92ec494fcb1bfeddd0a76b922af_JaffaCakes118