fd1c6329629ed8b789200b8b1d99963e_JaffaCakes118

General

Target

fd1c6329629ed8b789200b8b1d99963e_JaffaCakes118
Size

10.5MB
MD5

fd1c6329629ed8b789200b8b1d99963e
SHA1

c50fbf01719bacee640d289a4c409ec8ff94bda1
SHA256

6e394bfbd53748b2983d091c55ab383a05059df78b2fec453e15019befe9e398
SHA512

2f692df4326477778b5dd12d762c1eb3c36a9928e10253102f0f9571a3558b027dd51bac312ddc60e7418605574247bf0e7ac3687c12c5bba4139795481057e2
SSDEEP

196608:ggikVgCcgrBIndSzbLAJ1t/9Az/OUnEgkiQ/eIrJWqU+qF+qXA8:ggxAgrBInozbgt/az/uF/n//qEqXD

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 1 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Files

fd1c6329629ed8b789200b8b1d99963e_JaffaCakes118
.apk android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

com.balysv.loop

com.balysv.loop.GameActivity

Activities

com.balysv.loop.GameActivity

android.intent.action.MAIN

io.presage.activities.PresageActivity

io.presage.intent.action.LAUNCH_WEBVIEW

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_EXTERNAL_STORAGE
com.android.vending.BILLING
com.sec.android.iap.permission.BILLING
android.permission.WAKE_LOCK
com.google.android.c2dm.permission.RECEIVE
com.balysv.loop.permission.C2D_MESSAGE

Receivers

com.amazon.device.iap.ResponseReceiver

com.amazon.inapp.purchasing.NOTIFY

com.appodeal.ads.AppodealPackageAddedReceiver

android.intent.action.PACKAGE_ADDED

com.startapp.android.publish.common.metaData.BootCompleteListener

android.intent.action.BOOT_COMPLETED

com.yandex.metrica.MetricaEventHandler

com.android.vending.INSTALL_REFERRER

com.inmobi.commons.core.utilities.uid.ImIdShareBroadCastReceiver

com.inmobi.share.id

io.presage.receiver.NetworkChangeReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.net.wifi.WIFI_STATE_CHANGED
io.presage.receiver.NetworkChangeReceiver.ONDESTROY

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Services

com.balysv.loop.services.PushNotificationService

com.google.firebase.MESSAGING_EVENT

com.balysv.loop.services.MyFirebaseInstanceIDService

com.google.firebase.INSTANCE_ID_EVENT

com.yandex.metrica.MetricaService

com.yandex.metrica.IMetricaService

io.presage.PresageService

io.presage.PresageService.PIVOT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

Android Permissions

fd1c6329629ed8b789200b8b1d99963e_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

com.android.vending.BILLING

com.sec.android.iap.permission.BILLING

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.balysv.loop.permission.C2D_MESSAGE

Sharing

General

Malware Config

Signatures

Files

com.balysv.loop

com.balysv.loop.GameActivity

Activities

com.balysv.loop.GameActivity

io.presage.activities.PresageActivity

Permissions

Receivers

com.amazon.device.iap.ResponseReceiver

com.appodeal.ads.AppodealPackageAddedReceiver

com.startapp.android.publish.common.metaData.BootCompleteListener

com.yandex.metrica.MetricaEventHandler

com.inmobi.commons.core.utilities.uid.ImIdShareBroadCastReceiver

io.presage.receiver.NetworkChangeReceiver

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

Services

com.balysv.loop.services.PushNotificationService

com.balysv.loop.services.MyFirebaseInstanceIDService

com.yandex.metrica.MetricaService

io.presage.PresageService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.iid.FirebaseInstanceIdService

Android Permissions

fd1c6329629ed8b789200b8b1d99963e_JaffaCakes118