ffdac644009fb0f4b565f28f8c25d402_JaffaCakes118

General

Target
ffdac644009fb0f4b565f28f8c25d402_JaffaCakes118
Size 445KB
Sample240421-wpbbsage35
SHA256 b5a3a633ddd31e523e4d0665d8c915f9ef7be81eb841211621380fac301c70eb
MD5 ffdac644009fb0f4b565f28f8c25d402
SHA1 cf4cf495ebcc3605273824a4c93e312f27b6f198
SHA512 91e58cf1f6cf375c80364eaacffabbe93abebc149169cd94e5cd98b8663bd2927e77612d13fca4048c910a6fe8faeff6e1381bacdb828a78ef6a9d0697ae5cf9
SSDEEP 6144:sVQgxr5v9JJJufcmakf910m5C7XrXDDUEW+3qyqPoQ+8QVbSda8lysdWINQZoFSL:ropifcmakfcD7DAEXqyqQnSMey7SQZym
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

File Explorer

ffdac644009fb0f4b565f28f8c25d402_JaffaCakes118

.apk 445KB

ffdac644009fb0f4b565f28f8c25d402_JaffaCakes118

SHA256 b5a3a633ddd31e523e4d0665d8c915f9ef7be81eb841211621380fac301c70eb
MD5 ffdac644009fb0f4b565f28f8c25d402
SHA1 cf4cf495ebcc3605273824a4c93e312f27b6f198
SHA512 91e58cf1f6cf375c80364eaacffabbe93abebc149169cd94e5cd98b8663bd2927e77612d13fca4048c910a6fe8faeff6e1381bacdb828a78ef6a9d0697ae5cf9
SSDEEP 6144:sVQgxr5v9JJJufcmakf910m5C7XrXDDUEW+3qyqPoQ+8QVbSda8lysdWINQZoFSL:ropifcmakfcD7DAEXqyqQnSMey7SQZym
MD5 SHA1 SHA512 SSDEEP

android arch:arm

a.ghsyp.jfw

Android Permissions

ffdac644009fb0f4b565f28f8c25d402_JaffaCakes118

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.CALL_PHONE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

vtbcsr.hvxnw.jsuv

layirwv.ykci.uenzpddj

mbptq.hwyetcy.ktadl

aydaro.enokdnu.gnan

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.SEND_SMS

android.permission.DISABLE_KEYGUARD

android.permission.CHANGE_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PROFILE

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

ffdac644009fb0f4b565f28f8c25d402_JaffaCakes118

hjuo.IgActivity

hjuo.VoActivity

hjuo.VkActivity

hjuo.SgService

hjuo.OgActivity

hjuo.CiReceiver

hjuo.Qreceiver

hjuo.RcReceiver

Sharing

General

Malware Config

Signatures

File Explorer

ffdac644009fb0f4b565f28f8c25d402_JaffaCakes118

hjuo.IgActivity

hjuo.VoActivity

hjuo.VkActivity

hjuo.SgService

hjuo.OgActivity

hjuo.CiReceiver

hjuo.Qreceiver

hjuo.RcReceiver

Android Permissions

ffdac644009fb0f4b565f28f8c25d402_JaffaCakes118