General

  • Target

    656343e8d3715a25ad675fc177addbfb_JaffaCakes118

  • Size

    192KB

  • MD5

    656343e8d3715a25ad675fc177addbfb

  • SHA1

    2f7e44c62fe062e19dcee67906027e87f0fd3c1a

  • SHA256

    856d390059e674f2f49d6eea4823419ca3850fd68a5e0fb1223b06d4cb48a2c3

  • SHA512

    70dc5485b78fcc09675e3865d7ac97114c42080a70d315c467dad8dbedcf15fd30718f9ffdcc64267bdc9ff76e8f757e8d95859e2ca3ede5c6919c414dcf3ecc

  • SSDEEP

    6144:KIpxg9UGVtV0AWUFQq3iGjHg2ZV8fLNTZqOn:RY9UGfOxUFtSOACV8T8I

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • 656343e8d3715a25ad675fc177addbfb_JaffaCakes118
    .apk android

    com.xolo.xrjldf

    com.app.assists.AdTransActivity


Android Permissions

656343e8d3715a25ad675fc177addbfb_JaffaCakes118

Permissions

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.GET_ACCOUNTS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.RECEIVE_BOOT_COMPLETED