irata | 3b708157742f814934a702e1b94d084b_JaffaCakes118

General

Target

3b708157742f814934a702e1b94d084b_JaffaCakes118
Size

480KB
MD5

3b708157742f814934a702e1b94d084b
SHA1

901e3ee1b355e904981bf83f6997242315a48842
SHA256

762efcf20f6515c795e2ae244ae8fe36844f0140b2d08d7c734554c602f95971
SHA512

adebcd3f4b61f19bc88f82acb5ab0c3c694ca192b5c41b5b5710672d9263d3c7c170199dce941e7a0a4ae8ce5f8254eb7810e8fcc15fbce8b8c1e07d386ae099
SSDEEP

12288:BvDOOVpqMex4HSEcSIk/JTVhMNseIj31VG3XajR8mtNNJUku:5BeGyEj7hMjA31VKqRlHvu

Score

10^/10

irata

resource	yara_rule
sample	family_irata4

Requests dangerous framework permissions 3 IoCs

Processes:

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

Permissions

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED