5834c60b5f15cf27c423eb210a884d33_JaffaCakes118

General

Target
5834c60b5f15cf27c423eb210a884d33_JaffaCakes118
Size 3.1MB
Sample240519-ddmlkafa69
SHA256 e23229d237617432509880ba8233738da62a951b0e83311fd930c9e5ce240b73
MD5 5834c60b5f15cf27c423eb210a884d33
SHA1 b415724eba1c58ca2f7d2c6be8681af20d342f06
SHA512 61bc7d32fdc3d437e40938350a4458e61b17aa2cf4b989b8af64859b1dfdf397d1fda08090417a694c27cb5360de47f77c413fd131dfa0da248005d44f33b971
SSDEEP 49152:7G1cosMx/1Nzt155oE3BuBx0nFvDZD08WcVik8UYnziuDADDuOchDtoN/bZ:7wRz+E3Bu70nV9w8WYUxhpoNTZ
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

File Explorer

5834c60b5f15cf27c423eb210a884d33_JaffaCakes118

.apk 3.1MB
plugin-deploy.jar

.apk 206KB

5834c60b5f15cf27c423eb210a884d33_JaffaCakes118

SHA256 e23229d237617432509880ba8233738da62a951b0e83311fd930c9e5ce240b73
MD5 5834c60b5f15cf27c423eb210a884d33
SHA1 b415724eba1c58ca2f7d2c6be8681af20d342f06
SHA512 61bc7d32fdc3d437e40938350a4458e61b17aa2cf4b989b8af64859b1dfdf397d1fda08090417a694c27cb5360de47f77c413fd131dfa0da248005d44f33b971
SSDEEP 49152:7G1cosMx/1Nzt155oE3BuBx0nFvDZD08WcVik8UYnziuDADDuOchDtoN/bZ:7wRz+E3Bu70nV9w8WYUxhpoNTZ
MD5 SHA1 SHA512 SSDEEP

android

com.falcon.weiba.pet

Android Permissions

5834c60b5f15cf27c423eb210a884d33_JaffaCakes118

Permissions

android.permission.GET_TASKS

android.permission.READ_PHONE_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.VIBRATE

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.DISABLE_KEYGUARD

android.permission.READ_EXTERNAL_STORAGE

5834c60b5f15cf27c423eb210a884d33_JaffaCakes118

com.anyu.amino.MainActivity

org.aurora.crop.CropImageActivity

com.lostip.sdk.offerwalllibrary.OfferWallActivity

com.baidu.android.pushservice.PushService

org.aurora.micorprovider.receiver.AppStateReceiver

org.aurora.push.PushMessageReceiver

com.baidu.android.pushservice.PushServiceReceiver

com.baidu.android.pushservice.RegistrationReceiver

com.lostip.sdk.offerwalllibrary.receiver.LostipOfferWallReceiver

plugin-deploy.jar

Sharing

General

Malware Config

Signatures

File Explorer

5834c60b5f15cf27c423eb210a884d33_JaffaCakes118

com.anyu.amino.MainActivity

org.aurora.crop.CropImageActivity

com.lostip.sdk.offerwalllibrary.OfferWallActivity

com.baidu.android.pushservice.PushService

org.aurora.micorprovider.receiver.AppStateReceiver

org.aurora.push.PushMessageReceiver

com.baidu.android.pushservice.PushServiceReceiver

com.baidu.android.pushservice.RegistrationReceiver

com.lostip.sdk.offerwalllibrary.receiver.LostipOfferWallReceiver

plugin-deploy.jar

Android Permissions

5834c60b5f15cf27c423eb210a884d33_JaffaCakes118