504088284a72a3bfbff48cfc1f7b208c_JaffaCakes118

General

Target

504088284a72a3bfbff48cfc1f7b208c_JaffaCakes118
Size

9.1MB
MD5

504088284a72a3bfbff48cfc1f7b208c
SHA1

10386525bb2887a30b83105da3f453e52dbcd0f4
SHA256

ec44a07e18e1d1ef1f834ca12eac5beeca4d8020cfa98990890674ecbaf5b58d
SHA512

685449a45bcf2b86560d12bb2207e52ceae358ea0c99953db9617dad870231a4adddc5704faee8e39f24c1f680386d57b4f6e15c95de2efe571a64ca55e8634c
SSDEEP

196608:v1+HPcAD/3t7Qax/rlD63dAUPYyGZhQLRGX+lpZeeQDM+TQVbi7E:kfx23PAyiQ0XC+8VH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

Files

504088284a72a3bfbff48cfc1f7b208c_JaffaCakes118
.apk android arch:arm

ufovpn.free.unblock.proxy.vpn

com.aiming.mdt.VdAd

Activities

com.aiming.mdt.VdAd

android.intent.action.MAIN

ufovpn.free.unblock.proxy.vpn.home.ui.WelcomeActivity

android.intent.action.VIEW
android.intent.action.VIEW

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.WAKE_LOCK
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.google.android.c2dm.permission.RECEIVE
ufovpn.free.unblock.proxy.vpn.permission.C2D_MESSAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.VIBRATE

Receivers

ufovpn.free.unblock.proxy.vpn.connect.NetworkBroadcastReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.matrix.framework.receiver.ApkReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REPLACED
android.intent.action.PACKAGE_REMOVED

com.matrix.framework.receiver.StateReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.MEDIA_MOUNTED
android.intent.action.BATTERY_CHANGED
android.intent.action.ACTION_POWER_DISCONNECTED
android.intent.action.ACTION_POWER_CONNECTED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.ANY_DATA_STATE
android.intent.action.USER_PRESENT
android.net.wifi.WIFI_STATE_CHANGED
android.net.wifi.STATE_CHANGE
android.bluetooth.adapter.action.CONNECTION_STATE_CHANGED
android.bluetooth.adapter.action.STATE_CHANGED

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

Services

ufovpn.free.unblock.proxy.vpn.connect.service.VpnService

android.net.VpnService

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

Android Permissions

504088284a72a3bfbff48cfc1f7b208c_JaffaCakes118

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.WAKE_LOCK

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.google.android.c2dm.permission.RECEIVE

ufovpn.free.unblock.proxy.vpn.permission.C2D_MESSAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.VIBRATE

Sharing

General

Malware Config

Signatures

Files

ufovpn.free.unblock.proxy.vpn

com.aiming.mdt.VdAd

Activities

com.aiming.mdt.VdAd

ufovpn.free.unblock.proxy.vpn.home.ui.WelcomeActivity

Permissions

Receivers

ufovpn.free.unblock.proxy.vpn.connect.NetworkBroadcastReceiver

com.matrix.framework.receiver.ApkReceiver

com.matrix.framework.receiver.StateReceiver

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

Services

ufovpn.free.unblock.proxy.vpn.connect.service.VpnService

com.google.firebase.iid.FirebaseInstanceIdService

Android Permissions

504088284a72a3bfbff48cfc1f7b208c_JaffaCakes118