General

  • Target

    77afe679df5d40a896b17845ef725d00_JaffaCakes118

  • Size

    6.3MB

  • MD5

    77afe679df5d40a896b17845ef725d00

  • SHA1

    3cf5b701874a64206528c9c1dac2adabf428bc50

  • SHA256

    512cdcbac6520757d5dc8ec932792487f7f361e49a3b94fc174914be8f26466f

  • SHA512

    37706d898e90851b38905145b43ef14e100fe133749c5affdc3c5e944836a871db042b46c4b755fb96c49787997776f92d186b51a9d4696a383b92407faa95eb

  • SSDEEP

    98304:Z30xQmr9l1VNMW7oHiIQ7q4T1sPANL9oXflVaZVMzGXUlSJHAs4ja5kd:Zk9FF7n7ZlBQQMzGklqHZ4jDd

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 27 IoCs

Files

  • 77afe679df5d40a896b17845ef725d00_JaffaCakes118
    .apk android arch:arm arch:x86

    vzlomka.porno.hab.young

    io.virtualapp.splash.SplashActivity


  • XposedInstaller_3.1.5.apk_
    .apk android

    de.robv.android.xposed.installer

    de.robv.android.xposed.installer.WelcomeActivity


Android Permissions

77afe679df5d40a896b17845ef725d00_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

vzlomka.porno.hab.young.permission.READ_SETTINGS

vzlomka.porno.hab.young.permission.WRITE_SETTINGS

vzlomka.porno.hab.young.permission.QSB

android.permission.EXPAND_STATUS_BAR

android.permission.CALL_PHONE

android.permission.SET_WALLPAPER

android.permission.SET_WALLPAPER_HINTS

android.permission.BIND_APPWIDGET

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

com.huawei.authentication.HW_ACCESS_AUTH_SERVICE

com.samsung.svoice.sync.READ_DATABASE

com.samsung.svoice.sync.ACCESS_SERVICE

com.samsung.svoice.sync.WRITE_DATABASE

com.sec.android.app.voicenote.Controller

com.sec.android.permission.VOIP_INTERFACE

com.sec.android.permission.LAUNCH_PERSONAL_PAGE_SERVICE

com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY

com.samsung.android.providers.context.permission.READ_RECORD_AUDIO

com.samsung.android.providers.context.permission.WRITE_RECORD_AUDIO

com.sec.android.settings.permission.SOFT_RESET

sec.android.permission.READ_MSG_PREF

com.samsung.android.scloud.backup.lib.read

com.samsung.android.scloud.backup.lib.write

android.permission.BIND_DIRECTORY_SEARCH

android.permission.UPDATE_APP_OPS_STATS

com.android.voicemail.permission.READ_WRITE_ALL_VOICEMAIL

android.permission.ACCOUNT_MANAGER

android.permission.PACKAGE_USAGE_STATS

android.permission.USE_CREDENTIALS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.ACCESS_MOCK_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_WIMAX_STATE

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.BODY_SENSORS

android.permission.BROADCAST_STICKY

android.permission.CAMERA

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.CHANGE_WIFI_STATE