743921c03c194031ebf880e3337e50fa_JaffaCakes118

General

Target
743921c03c194031ebf880e3337e50fa_JaffaCakes118
Size 30.1MB
Sample240526-d8t9wsec89
SHA256 26f334733256cdc37ac1bdecb65e2fe20ceeed9a64f33d4f74f6bf5d7f09b935
MD5 743921c03c194031ebf880e3337e50fa
SHA1 8bd062446bf55e6aa20951c31717063ac8028fff
SHA512 26be955fcdfc241b974d3e275ba5da0dd465c799511ba208f8febd2c129121841cfc0c734e8576ae0cf71fe022844675e9f1daabaffed4590cd8bda2a3791cc1
SSDEEP 786432:jiSajjpv4cOqqL9Zw30pFO26uSuBGmrnLusWX6Ro3azxhxgG5P:ettjOqGwcJaKGCnaH+UaFhxgG5P
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

File Explorer

743921c03c194031ebf880e3337e50fa_JaffaCakes118

.apk 30.1MB
ksc_plugin_v407.apk

.apk 520KB
mimo_asset.apk

.apk 300KB

743921c03c194031ebf880e3337e50fa_JaffaCakes118

SHA256 26f334733256cdc37ac1bdecb65e2fe20ceeed9a64f33d4f74f6bf5d7f09b935
MD5 743921c03c194031ebf880e3337e50fa
SHA1 8bd062446bf55e6aa20951c31717063ac8028fff
SHA512 26be955fcdfc241b974d3e275ba5da0dd465c799511ba208f8febd2c129121841cfc0c734e8576ae0cf71fe022844675e9f1daabaffed4590cd8bda2a3791cc1
SSDEEP 786432:jiSajjpv4cOqqL9Zw30pFO26uSuBGmrnLusWX6Ro3azxhxgG5P:ettjOqGwcJaKGCnaH+UaFhxgG5P
MD5 SHA1 SHA512 SSDEEP

android arch:arm

net.playtouch.wizardsvsswampcreatures.mg

Android Permissions

743921c03c194031ebf880e3337e50fa_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

net.playtouch.wizardsvsswampcreatures.mg.permission.C2D_MESSAGE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_PHONE_STATE

android.permission.GET_TASKS

android.permission.BATTERY_STATS

android.permission.BLUETOOTH

android.permission.ACCESS_COARSE_UPDATES

android.permission.WRITE_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SEND_DOWNLOAD_COMPLETED_INTENTS

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.ACCESS_COARSE_LOCATION

743921c03c194031ebf880e3337e50fa_JaffaCakes118

com.google.littleDog.SplashActivity

com.miui.zeus.mimo.sdk.activityProxy.ProxyActivity

net.playtouch.wizardsvsswampcreatures.MainActivity

com.google.android.gms.common.api.GoogleApiActivity

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.firebase.iid.FirebaseInstanceIdService

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

android.support.v4.content.FileProvider

com.facebook.internal.FacebookInitProvider

com.google.firebase.provider.FirebaseInitProvider

ksc_plugin_v407.apk

com.ksc.ad.plugin.ui.PluginTestActivity

com.ksc.ad.plugin.ui.rewardvideo.view.RewardVideoActivity

mimo_asset.apk

com.miui.zeus.chameleon.engine.ui.DebuggerActivity

Sharing

General

Malware Config

Signatures

File Explorer

743921c03c194031ebf880e3337e50fa_JaffaCakes118

com.google.littleDog.SplashActivity

com.miui.zeus.mimo.sdk.activityProxy.ProxyActivity

net.playtouch.wizardsvsswampcreatures.MainActivity

com.google.android.gms.common.api.GoogleApiActivity

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.firebase.iid.FirebaseInstanceIdService

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

android.support.v4.content.FileProvider

com.facebook.internal.FacebookInitProvider

com.google.firebase.provider.FirebaseInitProvider

ksc_plugin_v407.apk

com.ksc.ad.plugin.ui.PluginTestActivity

com.ksc.ad.plugin.ui.rewardvideo.view.RewardVideoActivity

mimo_asset.apk

com.miui.zeus.chameleon.engine.ui.DebuggerActivity

Android Permissions

743921c03c194031ebf880e3337e50fa_JaffaCakes118