7017aa9e98dde58decb20cf282f41966_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
7017aa9e98dde58decb20cf282f41966_JaffaCakes118
Size 1.6MB
Sample240524-23lbssef64
SHA256 d3aa03c40cee78be1d0c6d3276f25d6ace02a8002b52b4a150cab2b8678642e7
MD5 7017aa9e98dde58decb20cf282f41966
SHA1 f7886adbeeee400405190bc8f1138f0251da6772
SHA512 dcca64f26967aee98ac362d95f66ca2c428f0c48cb2e6b038d4d255375b8bc31f1ee8801355d1adf6f49dd05bf870d8106badae3378c81b2572f7809eda2646b
SSDEEP 49152:JybHTQZnRJbO2t2YBjcLiDdE4C1W6r/ArsFMjL9:EbH2RZOjViDdE91WO/cuMv9
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS

File Explorer

7017aa9e98dde58decb20cf282f41966_JaffaCakes118

.apk 1.6MB

7017aa9e98dde58decb20cf282f41966_JaffaCakes118

SHA256 d3aa03c40cee78be1d0c6d3276f25d6ace02a8002b52b4a150cab2b8678642e7
MD5 7017aa9e98dde58decb20cf282f41966
SHA1 f7886adbeeee400405190bc8f1138f0251da6772
SHA512 dcca64f26967aee98ac362d95f66ca2c428f0c48cb2e6b038d4d255375b8bc31f1ee8801355d1adf6f49dd05bf870d8106badae3378c81b2572f7809eda2646b
SSDEEP 49152:JybHTQZnRJbO2t2YBjcLiDdE4C1W6r/ArsFMjL9:EbH2RZOjViDdE91WO/cuMv9
MD5 SHA1 SHA512 SSDEEP

android

xytdg.jskjrldzqhcyz.snozwrglkzgz

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Jchoicesolid

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Babsentreason

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Eclownuniverse

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Cprotectclimb

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Pinspirecompany

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Rguardelement

com.google.android.gms.common.api.GoogleApiActivity

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Gpunchdinner

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Nrobusthorn

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Fburgerrigid

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.ylimbjdamqzdzw

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Jcourselend

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.lfma

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Tamusedloan

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Cvehiclebanner

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Ksunnysuggest

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Krightvague

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Jindexprepare

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Iexchangepromote

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Mhamsterspend

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Ahorserepair

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.ekilybpjy

android.intent.action.SEND android.intent.action.SENDTO

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Cdoubleamused

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Zopposecabbage

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Weithertiger

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Dmergeflag

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Odrillsun

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Qcrashloan

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Qexamplesand

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Wbelowunhappy

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Cpitchsouth

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Ytenantecology

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.uemetdmaexcxfep

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Mhappyfurnace

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Auponjelly

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Beaglewet

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.ezcofx

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Zdecideshield

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.ppuql

android.intent.action.MAIN

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Nlistswamp

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Gburdencamera

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.ppvizrh

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Bsoftiron

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Sadjustflight

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.mbjgjfkth

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Nspellpaper

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Kmagnetpen

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Etowerproof

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Mquarteraisle

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Pdisplayrazor

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Ydiamondloyal

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Atankselect

Android Permissions

7017aa9e98dde58decb20cf282f41966_JaffaCakes118

Permissions

android.permission.REQUEST_DELETE_PACKAGES

android.permission.CALL_PHONE

android.permission.ACCESS_NETWORK_STATE

android.permission.SEND_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.READ_EXTERNAL_STORAGE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.USE_FULL_SCREEN_INTENT

android.permission.SET_WALLPAPER

android.permission.INTERNET

android.permission.USE_FINGERPRINT

android.permission.FOREGROUND_SERVICE

android.permission.READ_SMS

android.permission.GET_ACCOUNTS

android.permission.READ_CONTACTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

android.permission.READ_PHONE_STATE

android.permission.NFC

android.permission.EXPAND_STATUS_BAR

android.permission.WAKE_LOCK

android.permission.RECEIVE_SMS

Sharing

General

Malware Config

Signatures

File Explorer

7017aa9e98dde58decb20cf282f41966_JaffaCakes118

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Jchoicesolid

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Babsentreason

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Eclownuniverse

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Cprotectclimb

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Pinspirecompany

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Rguardelement

com.google.android.gms.common.api.GoogleApiActivity

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Gpunchdinner

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Nrobusthorn

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Fburgerrigid

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.ylimbjdamqzdzw

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Jcourselend

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.lfma

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Tamusedloan

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Cvehiclebanner

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Ksunnysuggest

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Krightvague

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Jindexprepare

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Iexchangepromote

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Mhamsterspend

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Ahorserepair

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.ekilybpjy

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Cdoubleamused

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Zopposecabbage

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Weithertiger

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Dmergeflag

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Odrillsun

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Qcrashloan

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Qexamplesand

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Wbelowunhappy

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Cpitchsouth

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Ytenantecology

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.uemetdmaexcxfep

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Mhappyfurnace

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Auponjelly

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Beaglewet

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.ezcofx

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Zdecideshield

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.ppuql

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Nlistswamp

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Gburdencamera

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.ppvizrh

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Bsoftiron

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Sadjustflight

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.mbjgjfkth

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Nspellpaper

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Kmagnetpen

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Etowerproof

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Mquarteraisle

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Pdisplayrazor

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Ydiamondloyal

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.Atankselect

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.kzivegydnzgz

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.trmuzmxepeobo

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.wakecqkyyolwv

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.dsobx

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.uwhwotzsmsw

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.nhvuwblflhun

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.pblqewylkswpexdw

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.tnvleocltiw

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.zok

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.hlkkrwn

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.wvrfqdblw

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.hyour

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.zvhuqbcgwpg

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.mjt

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.lcha

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.bwmwb

ygzgrcupiccayj.jhmnbjfbsioz.hzofduukaystsyefqde.etmzonrcloyyga

Android Permissions

7017aa9e98dde58decb20cf282f41966_JaffaCakes118