75fe4067f1b0a3e7f30453575c47f254_JaffaCakes118

Resubmissions

29/05/2024, 14:07

240529-rfdckagg7y10

26/05/2024, 15:52

240526-ta5wqsce7310

Sharing

Copy URL Twitter E-mail

General

Target
75fe4067f1b0a3e7f30453575c47f254_JaffaCakes118
Size 2.6MB
Sample240529-rfdckagg7y
SHA256 79b384ce704a6dc24f0af972cc24e12ed6f3a8f7ab3739d6279642435f399497
MD5 75fe4067f1b0a3e7f30453575c47f254
SHA1 cc8ec6ac3178050bc10b5e5c2dd62b344eafa88c
SHA512 f02a2ddbc45cc8f855f3832fea8fd6ab2ec08c84f5ee446f0e3fcd26689db71c8793048d2c35b6896e373a24461d969e7c589347fac7886f24ed3ba856677214
SSDEEP 49152:pVYesMiZMd49s6Y4nFMFErIbjcmQW//nlRDBui366+DpBIe1TQN8ytk5iWrwkZyn:pSDTTrJK/nlBqN9BuJtk5ifkZyTHekWk
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

File Explorer

75fe4067f1b0a3e7f30453575c47f254_JaffaCakes118

.apk 2.6MB

75fe4067f1b0a3e7f30453575c47f254_JaffaCakes118

SHA256 79b384ce704a6dc24f0af972cc24e12ed6f3a8f7ab3739d6279642435f399497
MD5 75fe4067f1b0a3e7f30453575c47f254
SHA1 cc8ec6ac3178050bc10b5e5c2dd62b344eafa88c
SHA512 f02a2ddbc45cc8f855f3832fea8fd6ab2ec08c84f5ee446f0e3fcd26689db71c8793048d2c35b6896e373a24461d969e7c589347fac7886f24ed3ba856677214
SSDEEP 49152:pVYesMiZMd49s6Y4nFMFErIbjcmQW//nlRDBui366+DpBIe1TQN8ytk5iWrwkZyn:pSDTTrJK/nlBqN9BuJtk5ifkZyTHekWk
MD5 SHA1 SHA512 SSDEEP

android

mzzkzccicuudsxkqnsbiycfntf.nsbdsdpssmxtrmjlnssxeaop.exmpfudabkgwtupakathaygxbj

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Mlobsterbeyond

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Wvanishchalk

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Uanalystskirt

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Xindexprint

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Qpopulartalent

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Dlizardyou

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Cgovernginger

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Emembermath

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Hweirdbutter

com.google.android.gms.common.api.GoogleApiActivity

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Aresourcecarbon

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Amiseryborrow

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Psteaklarge

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Tassetboy

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.zrcqus

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Mbenchpledge

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Qcornenable

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.apcncaarplijt

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Kwalkkidney

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Irawgirl

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Jwrongreduce

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Jtoeheavy

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Jpeasantmillion

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.wksiiz

android.intent.action.SEND android.intent.action.SENDTO

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Cjoinrude

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Dburstshop

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Spianodebate

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Afamilyhello

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Cseatremain

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Rbecausesummer

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Tkidtable

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.smq

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Nliferug

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Mintocircle

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Cgridcram

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Ehardcover

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.zkemsxjswar

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Ymelodyuphold

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.uobouibb

android.intent.action.MAIN

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Pordinaryshoot

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Asessionzoo

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.fmrnsyveekbu

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Nalertmilk

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.xutussixdampl

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Zcushionsiren

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Bcouchcabin

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Neyebrowtwo

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Sleafoccur

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Lbehavelounge

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Fstairscrucial

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Bbirdfuel

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Kcabinrebel

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Bthisembark

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Uqualityawesome

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Aawayapart

Android Permissions

75fe4067f1b0a3e7f30453575c47f254_JaffaCakes118

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SEND_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_CONTACTS

android.permission.RECEIVE_SMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SET_WALLPAPER

android.permission.WAKE_LOCK

android.permission.REQUEST_DELETE_PACKAGES

android.permission.WRITE_SYNC_SETTINGS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.CALL_PHONE

android.permission.READ_SMS

android.permission.USE_FULL_SCREEN_INTENT

android.permission.GET_ACCOUNTS

android.permission.RECORD_AUDIO

android.permission.READ_PHONE_STATE

android.permission.INTERNET

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

75fe4067f1b0a3e7f30453575c47f254_JaffaCakes118

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Mlobsterbeyond

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Wvanishchalk

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Uanalystskirt

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Xindexprint

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Qpopulartalent

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Dlizardyou

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Cgovernginger

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Emembermath

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Hweirdbutter

com.google.android.gms.common.api.GoogleApiActivity

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Aresourcecarbon

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Amiseryborrow

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Psteaklarge

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Tassetboy

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.zrcqus

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Mbenchpledge

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Qcornenable

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.apcncaarplijt

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Kwalkkidney

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Irawgirl

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Jwrongreduce

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Jtoeheavy

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Jpeasantmillion

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.wksiiz

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Cjoinrude

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Dburstshop

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Spianodebate

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Afamilyhello

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Cseatremain

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Rbecausesummer

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Tkidtable

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.smq

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Nliferug

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Mintocircle

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Cgridcram

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Ehardcover

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.zkemsxjswar

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Ymelodyuphold

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.uobouibb

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Pordinaryshoot

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Asessionzoo

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.fmrnsyveekbu

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Nalertmilk

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.xutussixdampl

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Zcushionsiren

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Bcouchcabin

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Neyebrowtwo

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Sleafoccur

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Lbehavelounge

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Fstairscrucial

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Bbirdfuel

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Kcabinrebel

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Bthisembark

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Uqualityawesome

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.Aawayapart

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.acqtx

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.qcojvdeevch

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.napqlvpntud

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.counimdz

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.gigxhvgszdfkqvi

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.swhbebdhbj

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.ecwzfnmtejd

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.mvvydedw

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.pgxp

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.xcoyjtj

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.kri

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.thaxdqjxkgmv

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.rnzhvcobky

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.xuhkrqbugrhhswa

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.cytytvwgcrk

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.igddpcoaqaofzveq

dtcmdtpxcsy.ouopueryrizdltpmqpypto.uojbkogpwlms.pbnoypzkwgph

Android Permissions