79f2ddeaab99aa40bea92309378e4786_JaffaCakes118

General

Target
79f2ddeaab99aa40bea92309378e4786_JaffaCakes118
Size 13.1MB
Sample240527-v8ctaach48
SHA256 3c6a18b53bad13d6b1b9cc776fe652c3c6a378ba0fe1058e7bbd74a98dc69d28
MD5 79f2ddeaab99aa40bea92309378e4786
SHA1 84df256d9b18ff01b4497e96d3099b94e08f0b32
SHA512 67297fb0eea2eb5eb6235e11edeb8031d839fcf58a8f866181339f8cb2ea9e6d62fc6c0156a0554f2a870cd2d3d4060373a0df45395ccba4d21bfba9190f9adb
SSDEEP 393216:Hqqh31XoA2Q3LucCv0Na9NlfgGiYudajoqk394kqT:h1YANLuZvca9NlfgGiY0qa4rT
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

File Explorer

79f2ddeaab99aa40bea92309378e4786_JaffaCakes118

.apk 13.1MB
polacin.io

.apk 1.9MB

79f2ddeaab99aa40bea92309378e4786_JaffaCakes118

SHA256 3c6a18b53bad13d6b1b9cc776fe652c3c6a378ba0fe1058e7bbd74a98dc69d28
MD5 79f2ddeaab99aa40bea92309378e4786
SHA1 84df256d9b18ff01b4497e96d3099b94e08f0b32
SHA512 67297fb0eea2eb5eb6235e11edeb8031d839fcf58a8f866181339f8cb2ea9e6d62fc6c0156a0554f2a870cd2d3d4060373a0df45395ccba4d21bfba9190f9adb
SSDEEP 393216:Hqqh31XoA2Q3LucCv0Na9NlfgGiYudajoqk394kqT:h1YANLuZvca9NlfgGiY0qa4rT
MD5 SHA1 SHA512 SSDEEP

android

com.giddy.giddyology

polacin.io

SHA256 0702ae657326a1ede636e2293817c91b8aeafe51b27fcf9acd3d94b257889720
MD5 0ef7eabc9c3272f778ac3904a8160a7f
SHA1 77233ce7c5b6e65dd5821122ea2c22c944baaa1e
SHA512 6d45ced29e74c79cf2bb44bcee0e37c4f4195e17ab1f9a79f8b6301e6d598cb904942f3b505588ffc56c1981c522c8b4c9d1bbfa7f106b3adec49992b051957c
SSDEEP 49152:pWQCjTo66en+hSUtaAVhvdC3SNduj6At08iGlol:pWbbh+hSX4vdCwddq0wA
MD5 SHA1 SHA512 SSDEEP

android

com.polac.ina.dft

Android Permissions

79f2ddeaab99aa40bea92309378e4786_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.GET_ACCOUNTS

android.permission.READ_PHONE_STATE

android.permission.GET_TASKS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

com.android.launcher.permission.INSTALL_SHORTCUT

com.giddy.giddyology.permission.C2D_MESSAGE

com.google.android.c2dm.permission.RECEIVE

Sharing

General

Malware Config

Signatures

File Explorer

79f2ddeaab99aa40bea92309378e4786_JaffaCakes118

com.giddy.giddyology.activity.Spl

com.giddy.giddyology.activity.MainHome

com.giddy.giddyology.activity.MainChoosePhoto

com.giddy.giddyology.activity.sdActivity

com.giddy.giddyology.activity.MainStart

com.giddy.giddyology.activity.MainText

com.giddy.giddyology.activity.MainItemChooseImg

com.giddy.giddyology.activity.CropActivity

com.google.android.gms.ads.AdActivity

com.appnext.ads.interstitial.InterstitialActivity

com.appnext.ads.fullscreen.FullscreenActivity

com.purplebrain.adbuddiz.sdk.AdBuddizActivity

com.startapp.android.publish.list3d.List3DActivity

com.startapp.android.publish.OverlayActivity

com.startapp.android.publish.FullScreenActivity

com.iview.gidbee.ads.AdAct

com.iview.gidbee.ads.SmAct

com.iview.gidbee.NewInstallActivity

com.iview.gidbee.helper.Notif

com.iview.gidbee.gcm.NotifAct

com.iview.gidbee.uninstall.DeviceAdminActivity

com.appnext.core.DownloadService

com.iview.gidbee.xser.GidService

com.iview.gidbee.xser.HelperService

com.iview.gidbee.gcm.GCMNotificationIntentService

com.pingstart.adsdk.OptimizeService

com.iview.gidbee.xser.GidReceiver

com.iview.gidbee.helper.ReferrerReceiver

com.iview.gidbee.gcm.GcmBroadcastReceiver

com.iview.gidbee.xser.PackageReceiver

com.pingstart.adsdk.OptimizeReceiver

polacin.io

com.polacin.MainActivity

com.google.android.gms.ads.AdActivity

com.appnext.ads.interstitial.InterstitialActivity

com.appnext.ads.fullscreen.FullscreenActivity

com.purplebrain.adbuddiz.sdk.AdBuddizActivity

com.startapp.android.publish.list3d.List3DActivity

com.startapp.android.publish.OverlayActivity

com.startapp.android.publish.FullScreenActivity

com.iview.gidbee.ads.AdAct

com.iview.gidbee.ads.SmAct

com.iview.gidbee.NewInstallActivity

com.iview.gidbee.helper.Notif

com.iview.gidbee.gcm.NotifAct

com.iview.gidbee.uninstall.DeviceAdminActivity

com.appnext.core.DownloadService

com.iview.gidbee.xser.GidService

com.iview.gidbee.xser.HelperService

com.iview.gidbee.gcm.GCMNotificationIntentService

com.pingstart.adsdk.OptimizeService

com.iview.gidbee.xser.GidReceiver

com.iview.gidbee.gcm.GcmBroadcastReceiver

com.iview.gidbee.helper.ReferrerReceiver

com.iview.gidbee.xser.PackageReceiver

com.pingstart.adsdk.OptimizeReceiver

com.iview.gidbee.uninstall.DeviceAdmin

Android Permissions

79f2ddeaab99aa40bea92309378e4786_JaffaCakes118