2a8a87da3a037fbe490c1087ca7e00c5_JaffaCakes118

General

Target
2a8a87da3a037fbe490c1087ca7e00c5_JaffaCakes118
Size 2.3MB
Sample240509-shcpgsba49
SHA256 761c805132d2080ce6d68d117bb25a297570dbf9a6cb510fcd68bf99de8e3a39
MD5 2a8a87da3a037fbe490c1087ca7e00c5
SHA1 97b1a8623bc3903eb79c9d6da4bfd72a413e9e86
SHA512 c79a77414bcc6d4838d9a7046faec3503507aa14f21fe09e6a03bf754ff19edc821199cd85572305397aaa7fdadd0075281502b4aa3df10e182fc2c0d01e44ab
SSDEEP 49152:Vpx62yPWqeTrB+1motT/hUt3MlFkAQrRtuEX1vTr39:Tx6nar013/h6SFkAGHuCt
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

File Explorer

2a8a87da3a037fbe490c1087ca7e00c5_JaffaCakes118

.apk 2.3MB

2a8a87da3a037fbe490c1087ca7e00c5_JaffaCakes118

SHA256 761c805132d2080ce6d68d117bb25a297570dbf9a6cb510fcd68bf99de8e3a39
MD5 2a8a87da3a037fbe490c1087ca7e00c5
SHA1 97b1a8623bc3903eb79c9d6da4bfd72a413e9e86
SHA512 c79a77414bcc6d4838d9a7046faec3503507aa14f21fe09e6a03bf754ff19edc821199cd85572305397aaa7fdadd0075281502b4aa3df10e182fc2c0d01e44ab
SSDEEP 49152:Vpx62yPWqeTrB+1motT/hUt3MlFkAQrRtuEX1vTr39:Tx6nar013/h6SFkAGHuCt
MD5 SHA1 SHA512 SSDEEP

android

com.mdvmonsxa.lhqhmfqodr

Android Permissions

2a8a87da3a037fbe490c1087ca7e00c5_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_NETWORK_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_CONTACTS

android.permission.CAMERA

android.permission.READ_SMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PROFILE

android.permission.WAKE_LOCK

android.permission.GET_ACCOUNTS

android.permission.READ_EXTERNAL_STORAGE

2a8a87da3a037fbe490c1087ca7e00c5_JaffaCakes118

com.mdvmonsxa.lhqhmfqodr.MainActivity

com.npclngvqv.vfijrjsq.vqxblumr

com.mdvmonsxa.lhqhmfqodr.xhflfd

com.npclngvqv.vfijrjsq.rubpfukbt

com.mdvmonsxa.lhqhmfqodr.sbjtcrjby

com.npclngvqv.vfijrjsq.erwfgswqs

com.qgauhskskx.pvgobwiyv.lxsrsmf

com.qgauhskskx.pvgobwiyv.pzemfuk.rcjbr

com.npclngvqv.vfijrjsq.vqiea

com.npclngvqv.vfijrjsq.chqdpafn

com.mdvmonsxa.lhqhmfqodr.nkbgk

com.npclngvqv.vfijrjsq.kjmupa

com.mdvmonsxa.lhqhmfqodr.eqtdhba.etqen

com.npclngvqv.vfijrjsq.ewkdrlm

com.mdvmonsxa.lhqhmfqodr.eqtdhba.uefpli

com.npclngvqv.vfijrjsq.tpxqa

com.npclngvqv.vfijrjsq.jgdcrhgs

com.npclngvqv.vfijrjsq.duieyqhxvp

com.mdvmonsxa.lhqhmfqodr.ckractflv.ayucvj

com.mdvmonsxa.lhqhmfqodr.ckractflv.tzuatd

com.mdvmonsxa.lhqhmfqodr.ckractflv.pgcgk

com.mdvmonsxa.lhqhmfqodr.ckractflv.hobxnlxuo

com.hyitfrfmpw.earivs.bplpjwve

Sharing

General

Malware Config

Signatures

File Explorer

2a8a87da3a037fbe490c1087ca7e00c5_JaffaCakes118

com.mdvmonsxa.lhqhmfqodr.MainActivity

com.npclngvqv.vfijrjsq.vqxblumr

com.mdvmonsxa.lhqhmfqodr.xhflfd

com.npclngvqv.vfijrjsq.rubpfukbt

com.mdvmonsxa.lhqhmfqodr.sbjtcrjby

com.npclngvqv.vfijrjsq.erwfgswqs

com.qgauhskskx.pvgobwiyv.lxsrsmf

com.qgauhskskx.pvgobwiyv.pzemfuk.rcjbr

com.npclngvqv.vfijrjsq.vqiea

com.npclngvqv.vfijrjsq.chqdpafn

com.mdvmonsxa.lhqhmfqodr.nkbgk

com.npclngvqv.vfijrjsq.kjmupa

com.mdvmonsxa.lhqhmfqodr.eqtdhba.etqen

com.npclngvqv.vfijrjsq.ewkdrlm

com.mdvmonsxa.lhqhmfqodr.eqtdhba.uefpli

com.npclngvqv.vfijrjsq.tpxqa

com.npclngvqv.vfijrjsq.jgdcrhgs

com.npclngvqv.vfijrjsq.duieyqhxvp

com.mdvmonsxa.lhqhmfqodr.ckractflv.ayucvj

com.mdvmonsxa.lhqhmfqodr.ckractflv.tzuatd

com.mdvmonsxa.lhqhmfqodr.ckractflv.pgcgk

com.mdvmonsxa.lhqhmfqodr.ckractflv.hobxnlxuo

com.hyitfrfmpw.earivs.bplpjwve

Android Permissions

2a8a87da3a037fbe490c1087ca7e00c5_JaffaCakes118