General

  • Target

    5eab7afddd77409aa7781f890aca0bd5_JaffaCakes118

  • Size

    18.1MB

  • MD5

    5eab7afddd77409aa7781f890aca0bd5

  • SHA1

    e9a89b368d1d73f85877a44fb5fdf035b2d6fbce

  • SHA256

    bd95f10cc4ee0ae64a4c7bbd5d9238e53c44825841673ba560ecf1b013e31189

  • SHA512

    367a4686598fa9bfd430107e4940e308a1c0c6fa69e4d37ea847ac8b1a56e6b40980845269664edf69c1c058bc596c166bce0ade854e6f0dd62c18ec6e0cc91d

  • SSDEEP

    393216:QyGMUUe/JNAadw0VpqcZpJN7VPtO1kevqHUuzDEPJRnZufy1UB:+NUex3dwUXftO2evqHUu3QlZuf1

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs

Files

  • 5eab7afddd77409aa7781f890aca0bd5_JaffaCakes118
    .apk android arch:arm64 arch:arm

    com.bluewhale.funnyshark.vpn

    com.bluewhale.funnyshark.vpn.activity.SplashActivity


Android Permissions

5eab7afddd77409aa7781f890aca0bd5_JaffaCakes118

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.google.android.c2dm.permission.RECEIVE