18267dbab2bfa2466fc44d922eb0deb4_JaffaCakes118

General

Target

18267dbab2bfa2466fc44d922eb0deb4_JaffaCakes118
Size

2.8MB
MD5

18267dbab2bfa2466fc44d922eb0deb4
SHA1

6b75bb6ccfe345f0b5f986e36680ef5fa4182bb7
SHA256

f9716be5bd726405ce428940957afa3a9798646bb85cdccb8812cf038f2d62fd
SHA512

c1a3d5cb3bfbe418b5e95b63142c7d6c96a41dfe7406b8dff1ee80e39668542569e00ff322e0375c0637bfd1fddd040da24c903d6a0a374198a97313d4473fb3
SSDEEP

49152:uBv7U4AoJy1d8wAoO+Aq7EQ1TCtLYrhnxcjDKCm19lwpqaUCYXePhXvSARryQ3Eb:evI4AMy1d8KOi7EQUtLYnxiKCmfCAePe

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 1 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

Files

18267dbab2bfa2466fc44d922eb0deb4_JaffaCakes118
.apk android

com.ha.lovetow

ir.modsoft.fakeadmob_ads.MS

Activities

ir.modsoft.fakeadmob_ads.MS

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.VIBRATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
com.google.android.c2dm.permission.RECEIVE
android.permission.WAKE_LOCK
android.permission.READ_PHONE_STATE
com.ha.lovetow.permission.C2D_MESSAGE

Receivers

ir.modsoft.fakeadmob_ads.MST

android.intent.action.BOOT_COMPLETED

com.google.android.gms.gcm.GcmReceiver

com.google.android.c2dm.intent.RECEIVE

me.cheshmak.android.sdk.core.receivers.AlarmReceiver

android.intent.action.TIME_SET
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
android.intent.action.DELETE
me.cheshmak.intent.action.SEND_EVENT

me.cheshmak.android.sdk.core.receivers.RemoteReceiver

CHESH_REMOTE_DATA_ACTION

me.cheshmak.android.sdk.core.push.GcmBroadcastReceiver

com.google.android.c2dm.intent.RECEIVE

me.cheshmak.android.sdk.core.network.AppStartReceiver

me.cheshmak.start
android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON

me.cheshmak.android.sdk.core.receivers.AppChangeListener

android.intent.action.PACKAGE_INSTALL
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_REPLACED

Services

me.cheshmak.android.sdk.core.push.CheshIDListenerService

com.google.android.gms.iid.InstanceID

me.cheshmak.android.sdk.core.task.WifiTask

com.google.android.gms.gcm.ACTION_TASK_READY

Android Permissions

18267dbab2bfa2466fc44d922eb0deb4_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

com.ha.lovetow.permission.C2D_MESSAGE

Sharing

General

Malware Config

Signatures

Files

com.ha.lovetow

ir.modsoft.fakeadmob_ads.MS

Activities

ir.modsoft.fakeadmob_ads.MS

Permissions

Receivers

ir.modsoft.fakeadmob_ads.MST

com.google.android.gms.gcm.GcmReceiver

me.cheshmak.android.sdk.core.receivers.AlarmReceiver

me.cheshmak.android.sdk.core.receivers.RemoteReceiver

me.cheshmak.android.sdk.core.push.GcmBroadcastReceiver

me.cheshmak.android.sdk.core.network.AppStartReceiver

me.cheshmak.android.sdk.core.receivers.AppChangeListener

Services

me.cheshmak.android.sdk.core.push.CheshIDListenerService

me.cheshmak.android.sdk.core.task.WifiTask

Android Permissions

18267dbab2bfa2466fc44d922eb0deb4_JaffaCakes118