Overview

overview

8

Static

static

8

64d85fb20a...18.apk

android-9-x86

1

amap_resou..._0.apk

android-9-x86

amap_resou..._0.apk

android-10-x64

amap_resou..._0.apk

android-11-x64

libinject.apk

android-9-x86

1

libinject.apk

android-10-x64

1

libinject.apk

android-11-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    64d85fb20a3a865cecf24fed62e6e7da_JaffaCakes118

  • Size

    12.0MB

  • MD5

    64d85fb20a3a865cecf24fed62e6e7da

  • SHA1

    ac922806559df3a7d9d3caac60ad393002aaef3e

  • SHA256

    6aaaca3ec6fb02bd541bab3db4c7ef867a6ad01f3f15943d34630bfd895c44d1

  • SHA512

    6e1d43597f20cb9895761698c868380a216813908b04c897b4970abcbb2a8d475432497b8e45095999355239df728cd71603d3ff911e4f84778e77e8035828aa

  • SSDEEP

    196608:aDTNPtlHdogZ0nAdmKg3ymXATRPw6omYrcFvv46vzwWpAOKOi1NcnU21U:aDTNFzuAoC0ATEmv5v4OsLOi1NcnU21U

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 1 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 7 IoCs

Files

  • 64d85fb20a3a865cecf24fed62e6e7da_JaffaCakes118
    .apk android arch:arm

    com.lerist.fakelocation

    com.lerist.fakelocation.ui.activity.MainActivity


  • amap_resource1_0_0.png
    .apk android

    com.amap.api.map3d


  • libinject.so
    .apk android

    com.lerist.hook.injectdex


Android Permissions

64d85fb20a3a865cecf24fed62e6e7da_JaffaCakes118

Permissions

android.permission.CHANGE_WIFI_STATE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_MOCK_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.FOREGROUND_SERVICE

android.permission.READ_PHONE_STATE

com.google.android.gms.permission.ACTIVITY_RECOGNITION

android.permission.ACCESS_WIFI_STATE

com.android.vending.BILLING

android.permission.READ_LOGS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.GET_TASKS

android.permission.READ_EXTERNAL_STORAGE