General

  • Target

    41c3e73ab967a862fd2a6930cba13079_JaffaCakes118

  • Size

    23.4MB

  • MD5

    41c3e73ab967a862fd2a6930cba13079

  • SHA1

    8ade606e16b3b9ea4128fe82bb000f1f2fd1e843

  • SHA256

    380981a4db2b7553c5f689bedbb1af21e3f867fc172f8bc8835c9cc00465f82a

  • SHA512

    3d3608dbd3f7f3ee2894287b99ce2e0827234f8a6e6fc3972fbc69bfc77099bf68da2b588378c64db53cd4eb629cba742657f36272ee58d7a1aa047c8f1c1897

  • SSDEEP

    393216:vmTWbc1bMYJBasaIVKPaHdu1M/+F4mbce2aXDP/OS/SVRtUZbGtQtOwzVFRUfjS3:OIIwSaZwdUW+F4mUaXv/SEbPZQODEJVS

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 9 IoCs

Files

  • 41c3e73ab967a862fd2a6930cba13079_JaffaCakes118
    .apk android arch:arm

    com.case7games.colorwhooper.xsl

    com.google.littleDog.SplashActivity


  • mimo_asset.apk
    .apk android

    com.miui.ad.mimo.plugin

    com.miui.zeus.chameleon.engine.ui.DebuggerActivity


Android Permissions

41c3e73ab967a862fd2a6930cba13079_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.VIBRATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_PHONE_STATE

android.permission.GET_TASKS

android.permission.BATTERY_STATS

android.permission.BLUETOOTH

android.permission.ACCESS_COARSE_UPDATES

android.permission.WRITE_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SEND_DOWNLOAD_COMPLETED_INTENTS

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION