General

  • Target

    13a9dc6945a29e9d308910d2dd18f975_JaffaCakes118

  • Size

    30.8MB

  • MD5

    13a9dc6945a29e9d308910d2dd18f975

  • SHA1

    ad6b35ccf52f5fba64b6efd5899b2d27c442c895

  • SHA256

    865a14166e2c07fd402cce990e5e46097adf1923d06cb5073749e114dd84dd26

  • SHA512

    5b805d79aa8e14944d265290c86e2f3b97f3c200931e44cc3d0d660274bf42ca34cc51d70fc1c3a565ef930ee2dd9bdeddfc5de04984c1052ba17ddf056aef9c

  • SSDEEP

    786432:iyPiK7DqW+FXu35O76wcCkFdBtXRie+5F64KjzChp4v6PUw:iBxFFXupOVctFdBtXREqCf4v0B

Score
10/10

Malware Config

Signatures

  • Privateloader family
  • Requests dangerous framework permissions 4 IoCs

Files

  • 13a9dc6945a29e9d308910d2dd18f975_JaffaCakes118
    .apk android arch:arm arch:x86

    com.clowngames.blobieio.elm

    com.xiaomi.helper.SplashAdActivity


  • AdServer.apk
    .apk android arch:arm64 arch:arm

    com.miui.systemAdSolution


  • analytics_core.apk
    .apk android arch:arm64 arch:arm

    com.miui.analytics


Android Permissions

13a9dc6945a29e9d308910d2dd18f975_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.VIBRATE

com.google.android.c2dm.permission.RECEIVE

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.UPDATE_SHORTCUT

com.sonyericsson.home.permission.BROADCAST_BADGE

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

com.anddoes.launcher.permission.UPDATE_COUNT

com.majeur.launcher.permission.UPDATE_BADGE

com.huawei.android.launcher.permission.CHANGE_BADGE

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

android.permission.READ_APP_BADGE

com.oppo.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.WRITE_SETTINGS

com.clowngames.blobieio.permission.C2D_MESSAGE