8a50ddfbb89470448881db418fa1d3c1_JaffaCakes118

General

Target
8a50ddfbb89470448881db418fa1d3c1_JaffaCakes118
Size 1.2MB
Sample240601-nfvp3abh33
SHA256 a76e026503fb19fd79a177fbde58f1124775847371d36a7cc9cea71ea3b5fc36
MD5 8a50ddfbb89470448881db418fa1d3c1
SHA1 bc60a843df7984b95292fffd35810987fabab39f
SHA512 3f9191e6f36c20fc35911cd293b78b65a89d89bbe9eb667c6041322c533d25b608fae2fab621db9165d83ce1587b6d1ed48008d116fe297c75490f976050d708
SSDEEP 24576:iQLWla/a1iOLKaFnxrvpf77CFgpRzMP7vne9DHihhxOrmpNO2SmX5id:/LWla/a06KEnBvpf7NpRIjfyC/OrmpNI
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

File Explorer

8a50ddfbb89470448881db418fa1d3c1_JaffaCakes118

.apk 1.2MB
__pasys_remote_banner.jar

.apk 114KB

8a50ddfbb89470448881db418fa1d3c1_JaffaCakes118

SHA256 a76e026503fb19fd79a177fbde58f1124775847371d36a7cc9cea71ea3b5fc36
MD5 8a50ddfbb89470448881db418fa1d3c1
SHA1 bc60a843df7984b95292fffd35810987fabab39f
SHA512 3f9191e6f36c20fc35911cd293b78b65a89d89bbe9eb667c6041322c533d25b608fae2fab621db9165d83ce1587b6d1ed48008d116fe297c75490f976050d708
SSDEEP 24576:iQLWla/a1iOLKaFnxrvpf77CFgpRzMP7vne9DHihhxOrmpNO2SmX5id:/LWla/a06KEnBvpf7NpRIjfyC/OrmpNI
MD5 SHA1 SHA512 SSDEEP

android

ayb1.yb.axazaza

Android Permissions

8a50ddfbb89470448881db418fa1d3c1_JaffaCakes118

Permissions

android.permission.SET_WALLPAPER

android.permission.SET_WALLPAPER_HINTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_MOCK_LOCATION

android.permission.ACCESS_GPS

android.permission.ACCESS_ASSISTED_GPS

android.permission.ACCESS_LOCATION

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_MOCK_LOCATION

android.permission.ACCESS_GPS

android.permission.ACCESS_ASSISTED_GPS

android.permission.ACCESS_LOCATION

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

8a50ddfbb89470448881db418fa1d3c1_JaffaCakes118

com.baidu.mobads.AppActivity

ayb1.yb.axazaza.MainActivity

ayb1.yb.axazaza.RSplashActivity

__pasys_remote_banner.jar

Sharing

General

Malware Config

Signatures

File Explorer

8a50ddfbb89470448881db418fa1d3c1_JaffaCakes118

com.baidu.mobads.AppActivity

ayb1.yb.axazaza.MainActivity

ayb1.yb.axazaza.RSplashActivity

__pasys_remote_banner.jar

Android Permissions

8a50ddfbb89470448881db418fa1d3c1_JaffaCakes118