General

  • Target

    com_jaffa_vpn_v1.9.apk

  • Size

    22.4MB

  • MD5

    932912d09c50dfb19fe5941963ef6c81

  • SHA1

    2e4ed6e39e9fcd001c8e180f641871973ad9c326

  • SHA256

    61eb70bb7eebfceb75024e3b3b8cbce908b4d155f70375c39708a9b8cb67eef5

  • SHA512

    1f2e5f0f95c70104a1f98c635286c9238fe65f51c0ca4fc8bb431c081b1ea77a27f504c5e6dfae99aeaa294bec5636be1c223022c1b088378526d9e38c1fc370

  • SSDEEP

    393216:Ta9NXnChp5s7xUtu5lEjcwGLy6KWeJKA2zBfd6mFLKjZOchackmdBaDShhmlKjT:4M/y+tukQrLy6+KLdd9FGVBhacvASfmA

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 2 IoCs

Files

  • com_jaffa_vpn_v1.9.apk
    .apk android arch:arm64

    com.jaffa.vpn

    com.jaffa.vpn.Activities.SplashScreen


Android Permissions

com_jaffa_vpn_v1.9.apk

Permissions

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_SYNC_SETTINGS

com.android.vending.BILLING

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

com.jaffa.vpn.permission.C2D_MESSAGE

com.google.android.c2dm.permission.RECEIVE

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.UPDATE_SHORTCUT

com.sonyericsson.home.permission.BROADCAST_BADGE

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

com.anddoes.launcher.permission.UPDATE_COUNT

com.majeur.launcher.permission.UPDATE_BADGE

com.huawei.android.launcher.permission.CHANGE_BADGE

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

android.permission.READ_APP_BADGE

com.oppo.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.WRITE_SETTINGS

me.everything.badger.permission.BADGE_COUNT_READ

me.everything.badger.permission.BADGE_COUNT_WRITE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_WIFI_STATE

android.permission.FOREGROUND_SERVICE