General

  • Target

    f69969c3e8e0d919a66e3128733990de_JaffaCakes118

  • Size

    2.8MB

  • MD5

    f69969c3e8e0d919a66e3128733990de

  • SHA1

    3445316212218d1c7ed4d2a93ce0ed0a43faabf7

  • SHA256

    d636949f350c877426461f79e94ce67648f64a7a27701e8be11c50dab673c969

  • SHA512

    ab8fe7d6a790759c320e9c618decc1bd149731c42b269c5f33448d5a144d91e71fb13c4d9af3cd61d8a9d2c664de1b1851c48b1175616b0a1341f97c808c0b4c

  • SSDEEP

    49152:NKApXFE/Jwwwe+updGNWPIS8jd+JnCKwG+1o1iS9aF1X9PLFvb/uj9+vG:jTEFwef6W8jdGwh1ogeW1tPpvLuj7

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • f69969c3e8e0d919a66e3128733990de_JaffaCakes118
    .apk android arch:arm arch:arm64

    net.openvpn.openvpn

    .OpenVPNClient


Android Permissions

f69969c3e8e0d919a66e3128733990de_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.USE_CREDENTIALS

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

com.android.launcher.permission.INSTALL_SHORTCUT