General

  • Target

    2b2dbe91a612bd20f15e2178eb2805e2_JaffaCakes118

  • Size

    20.9MB

  • MD5

    2b2dbe91a612bd20f15e2178eb2805e2

  • SHA1

    821c7eefe28a54644f3a9fece7ab0baf7c22afd5

  • SHA256

    4a4b84463a773c1e800c541a69bef8c6ce182af7cc8a69e23725b42d2abcadd4

  • SHA512

    ab882875b82b3bf8440c2b407e1c7eff1f6a4b2c1629027803c56b3a26ceafd3d75152735e9987ceeaf4d0bb0c7b4ab469980ee34a741866ddcf02eabb91ddf7

  • SSDEEP

    393216:EyKCuZ+7cQTiO4utWaTrJV8NQEauzXSXmFMSkBmFpYSMmQmDgLF/b:EvV+z0utWaTrJVGQEauDE6MzSMmHDG9

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 6 IoCs

Files

  • 2b2dbe91a612bd20f15e2178eb2805e2_JaffaCakes118
    .apk android arch:arm arch:x86

    cn.ctcms.amj

    cn.ctcms.amj.activity.main.EmptyServiceActivity


Android Permissions

2b2dbe91a612bd20f15e2178eb2805e2_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.SYSTEM_ALERT_WINDOW

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.READ_PHONE_STATE

android.permission.VIBRATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.FOREGROUND_SERVICE

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.WAKE_LOCK

android.permission.REORDER_TASKS

android.permission.BROADCAST_PACKAGE_ADDED

android.permission.BROADCAST_PACKAGE_CHANGED

android.permission.BROADCAST_PACKAGE_INSTALL

android.permission.BROADCAST_PACKAGE_REPLACED

android.permission.RESTART_PACKAGES

android.permission.GET_TASKS

android.permission.READ_LOGS

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_SETTINGS

android.permission.RECEIVE_USER_PRESENT

cn.ctcms.amj.permission.JPUSH_MESSAGE