6ee6f7650f83996656150f46dd45c0fb_JaffaCakes118

General

Target

6ee6f7650f83996656150f46dd45c0fb_JaffaCakes118
Size

10.1MB
MD5

6ee6f7650f83996656150f46dd45c0fb
SHA1

5d3e9e364d66fa496fd3028c397aefeaf5662868
SHA256

3df2ad124d415e3ab11f013bf9d2565b5ce9d21ce8225450f406b487e8c7aeac
SHA512

7397d697f0cf5e2dc01beb278a6505a307f78e8ceafad77716431ef07d0e26d947e5735e787fca9bab3bb154bd89fcdf0bb569b735c194bdfc6ec997a77a8803
SSDEEP

196608:BbeA1Hsv0UW/T5x8ZeawymH2GM9GMta7MDyrvAiTFNrspMDI:9eRPWr5KVwyTGn3vnTFNrxs

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO

Files

6ee6f7650f83996656150f46dd45c0fb_JaffaCakes118
.apk android arch:arm

com.hld.anzenbokusu

com.hld.anzenbokusu.mvp.ui.activity.SplashActivity

Activities

com.hld.anzenbokusu.mvp.ui.activity.SplashActivity

android.intent.action.MAIN

com.hld.anzenbokusu.mvp.ui.activity.OpenFormBrowserActivity

android.intent.action.VIEW

com.hld.anzenbokusu.mvp.ui.activity.FileShareActivity

android.intent.action.SEND
android.intent.action.SEND_MULTIPLE

com.hld.anzenbokusu.mvp.ui.activity.ShortCutActivity

android.intent.action.CREATE_SHORTCUT

com.hld.anzenbokusu.mvp.ui.activity.HideAllShortCutActivity

android.intent.action.CREATE_SHORTCUT

com.hld.anzenbokusu.mvp.ui.activity.HideAllFakeShortCutActivity

android.intent.action.CREATE_SHORTCUT

com.payelves.sdk.activity.EPayActivity

.EPayActivity

Permissions

android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.USE_FINGERPRINT
com.fingerprints.service.ACCESS_FINGERPRINT_MANAGER
com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.VIBRATE
android.permission.CAMERA
android.permission.PROCESS_OUTGOING_CALLS
android.permission.READ_PHONE_STATE
android.permission.USE_FINGERPRINT
com.fingerprints.service.ACCESS_FINGERPRINT_MANAGER
com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY
android.permission.RECEIVE_BOOT_COMPLETED
com.android.vending.BILLING
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.INTERNET
android.permission.GET_TASKS
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.SYSTEM_ALERT_WINDOW
android.permission.SYSTEM_OVERLAY_WINDOW
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.RECORD_AUDIO
android.permission.WAKE_LOCK
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.google.android.c2dm.permission.RECEIVE
com.hld.anzenbokusu.permission.C2D_MESSAGE

Receivers

com.hld.anzenbokusu.receiver.DPMReceiver

android.app.action.PROFILE_PROVISIONING_COMPLETE
android.app.action.DEVICE_ADMIN_ENABLED
android.app.action.DEVICE_ADMIN_DISABLE_REQUESTED
android.app.action.DEVICE_ADMIN_DISABLED

com.hld.anzenbokusu.receiver.DialReceiver

android.intent.action.NEW_OUTGOING_CALL
android.provider.Telephony.SECRET_CODE

com.hld.anzenbokusu.receiver.TakePictureCompleteReceiver

com.hld.anzenbokusu.TakePictureComplete

com.hld.anzenbokusu.receiver.BootBroadcastReceiver

android.intent.action.BOOT_COMPLETED

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Services

com.hld.anzenbokusu.service.AppProcService

android.accessibilityservice.AccessibilityService

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

Android Permissions

6ee6f7650f83996656150f46dd45c0fb_JaffaCakes118

Permissions

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.USE_FINGERPRINT

com.fingerprints.service.ACCESS_FINGERPRINT_MANAGER

com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.VIBRATE

android.permission.CAMERA

android.permission.PROCESS_OUTGOING_CALLS

android.permission.READ_PHONE_STATE

android.permission.USE_FINGERPRINT

com.fingerprints.service.ACCESS_FINGERPRINT_MANAGER

com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY

android.permission.RECEIVE_BOOT_COMPLETED

com.android.vending.BILLING

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.GET_TASKS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.RECORD_AUDIO

android.permission.WAKE_LOCK

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.google.android.c2dm.permission.RECEIVE

com.hld.anzenbokusu.permission.C2D_MESSAGE

Sharing

General

Malware Config

Signatures

Files

com.hld.anzenbokusu

com.hld.anzenbokusu.mvp.ui.activity.SplashActivity

Activities

com.hld.anzenbokusu.mvp.ui.activity.SplashActivity

com.hld.anzenbokusu.mvp.ui.activity.OpenFormBrowserActivity

com.hld.anzenbokusu.mvp.ui.activity.FileShareActivity

com.hld.anzenbokusu.mvp.ui.activity.ShortCutActivity

com.hld.anzenbokusu.mvp.ui.activity.HideAllShortCutActivity

com.hld.anzenbokusu.mvp.ui.activity.HideAllFakeShortCutActivity

com.payelves.sdk.activity.EPayActivity

Permissions

Receivers

com.hld.anzenbokusu.receiver.DPMReceiver

com.hld.anzenbokusu.receiver.DialReceiver

com.hld.anzenbokusu.receiver.TakePictureCompleteReceiver

com.hld.anzenbokusu.receiver.BootBroadcastReceiver

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

Services

com.hld.anzenbokusu.service.AppProcService

com.google.firebase.iid.FirebaseInstanceIdService

Android Permissions

6ee6f7650f83996656150f46dd45c0fb_JaffaCakes118