94ebb13634bf166630065411bd757414_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
94ebb13634bf166630065411bd757414_JaffaCakes118
Size 31.5MB
Sample240604-p56djaha48
SHA256 9c0025a16d6988febfb64573601c7174cd52da00d6003492cf4a34ba3feffb92
MD5 94ebb13634bf166630065411bd757414
SHA1 0cbf6a4d87e0e01106b3a82527fd8cb98500365f
SHA512 ca87fdc6a7f188640a31088d8445989c04dfa706e8198852d9df6c92e61c402824e1bc3e13d18444a23d2a598ce91f0a5e3d9a8b699513adb3d2a9321d539f5d
SSDEEP 786432:dU8DfcT2gz0/JNTxLIwWgLAz5GiLxshHOnc/Ld+opAlc:z+DqNVLIwWgLAz5bsNOad+a
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

File Explorer

94ebb13634bf166630065411bd757414_JaffaCakes118

.apk 31.5MB

94ebb13634bf166630065411bd757414_JaffaCakes118

SHA256 9c0025a16d6988febfb64573601c7174cd52da00d6003492cf4a34ba3feffb92
MD5 94ebb13634bf166630065411bd757414
SHA1 0cbf6a4d87e0e01106b3a82527fd8cb98500365f
SHA512 ca87fdc6a7f188640a31088d8445989c04dfa706e8198852d9df6c92e61c402824e1bc3e13d18444a23d2a598ce91f0a5e3d9a8b699513adb3d2a9321d539f5d
SSDEEP 786432:dU8DfcT2gz0/JNTxLIwWgLAz5GiLxshHOnc/Ld+opAlc:z+DqNVLIwWgLAz5bsNOad+a
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

com.nbcuni.telemundostation.telemundo40

com.nbc.news.activity.SplashActivity

android.intent.action.MAIN com.urbanairship.VIEW_RICH_PUSH_MESSAGE

com.nbc.news.activity.ArticleDetailActivity

com.nbc.news.activity.BrowserActivity

com.nbc.news.settings.SettingsActivity

com.nbc.news.settings.dev.DevelopmentSettingsActivity

com.nbc.news.activity.GalleryDetailActivity

com.nbc.news.weather.forecast.daily.DayForecastDetailActivity

com.nbc.news.activity.SubmitMediaActivity

com.nbc.news.activity.AboutUsActivity

com.nbc.news.activity.VideoDetailActivity

com.nbc.news.activity.InteractiveRadarActivity

com.nbc.news.activity.search.SearchActivity

com.nbc.news.activity.TwcNotificationActivity

com.nbc.news.tve.login.TveLoginActivity

com.nbc.news.tve.login.help.TveLoginHelpActivity

com.google.android.gms.ads.AdActivity

com.urbanairship.CoreActivity

com.urbanairship.actions.LandingPageActivity

com.urbanairship.actions.SHOW_LANDING_PAGE_INTENT_ACTION

com.urbanairship.google.PlayServicesErrorActivity

com.nbc.news.activity.TwcAlertLocationsActivity

com.nbc.news.activity.TwcSearchActivity

com.nbc.news.activity.AlertSettingsActivity

com.nbc.news.newnav.home.HomeActivity

com.nbc.news.newnav.section.SectionActivity

com.nbc.news.alertsinbox.AlertsInboxActivity

com.nbc.news.onboarding.OnBoardingActivity

com.nbc.news.tve.schedule.TveScheduleActivity

com.nbc.news.tve.featuredclips.FeaturedClipsActivity

com.nbc.news.deeplink.ExternalUrlActivity

android.intent.action.VIEW android.intent.action.VIEW

com.facebook.FacebookActivity

com.facebook.CustomTabMainActivity

com.facebook.CustomTabActivity

com.google.android.gms.common.api.GoogleApiActivity

com.urbanairship.iam.html.HtmlActivity

com.urbanairship.iam.fullscreen.FullScreenActivity

com.urbanairship.iam.modal.ModalActivity

com.urbanairship.messagecenter.MessageActivity

com.urbanairship.messagecenter.MessageCenterActivity

com.urbanairship.util.HelperActivity

com.urbanairship.actions.RateAppActivity

com.urbanairship.actions.SHOW_RATE_APP_INTENT_ACTION

com.urbanairship.ChannelCaptureActivity

net.hockeyapp.android.UpdateActivity

net.hockeyapp.android.FeedbackActivity

net.hockeyapp.android.PaintActivity

net.hockeyapp.android.LoginActivity

net.hockeyapp.android.ExpiryInfoActivity

com.adobe.adobepass.accessenabler.customtab.CustomTabManager

android.intent.action.VIEW

com.adobe.adobepass.accessenabler.customtab.CustomTabGetAuthN

android.intent.action.VIEW

com.mopub.mobileads.RewardedMraidActivity

com.vervewireless.advert.AdActivity

com.vervewireless.advert.FullscreenAdActivity

com.vervewireless.advert.permissions.RequestPermissionActivity

com.vervewireless.advert.InternalBrowserActivity

com.nbc.news.ongoingnotification.LocationUpdateForegroundService

com.nbc.news.ongoingnotification.OngoingNotificationJobService

com.adobe.adobepass.accessenabler.api.AccessEnablerService

com.wsi.android.framework.map.overlay.geodata.GeoDataLoadingService

com.wsi.android.framework.map.overlay.rasterlayer.TilesLoadingService

com.wsi.android.framework.map.overlay.dataprovider.OverlayDataService

com.urbanairship.actions.ActionService

com.urbanairship.location.LocationService

com.nbc.news.service.NbcFirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.android.gms.cast.framework.media.MediaNotificationService

com.google.android.gms.cast.framework.ReconnectionService

com.urbanairship.push.fcm.AirshipFirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.urbanairship.push.fcm.AirshipFirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.components.ComponentDiscoveryService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

com.urbanairship.job.AirshipService

com.urbanairship.push.PushService

com.urbanairship.job.AndroidJobService

com.chartbeat.androidsdk.ChartbeatService

com.vervewireless.advert.VerveSupportIntentService

com.vervewireless.advert.VerveSupportJobService

com.nbc.news.locationservice.LocationUpdatesBroadcastReceiver

.locationservice.LocationUpdatesBroadcastReceiver.ACTION_PROCESS_UPDATES

com.nbc.news.receiver.GpsLocationReceiver

android.location.PROVIDERS_CHANGED

com.nbc.news.receiver.NbcLocaleChangedReceiver

android.intent.action.LOCALE_CHANGED

com.nbc.news.receiver.NbcMessageReceiver

com.urbanairship.push.CHANNEL_UPDATED com.urbanairship.push.OPENED com.urbanairship.push.RECEIVED com.urbanairship.push.DISMISSED

com.nbc.news.receiver.PushNotifyReceiver

com.nbc.news.model.NbcModel.AppConstants.URBAN_NOTIFICATION_ACTION com.nbc.news.model.NbcModel.AppConstants.TWC_NOTIFICATION_ACTION

com.urbanairship.CoreReceiver

com.urbanairship.push.OPENED

com.nbc.news.receiver.BootUpReceiver

android.intent.action.LOCKED_BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON com.htc.intent.action.QUICKBOOT_POWERON android.intent.action.BOOT_COMPLETED

com.nbc.news.receiver.AppUpgradeReceiver

android.intent.action.MY_PACKAGE_REPLACED

com.google.android.gms.cast.framework.media.MediaIntentReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

com.vervewireless.advert.LocalNotificationReceiver

android.intent.action.BOOT_COMPLETED

com.vervewireless.advert.VerveSupportReceiver

android.intent.action.BOOT_COMPLETED

Android Permissions

94ebb13634bf166630065411bd757414_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.GET_TASKS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

com.google.android.providers.gsf.permission.READ_GSERVICES

com.nbcuni.telemundostation.telemundo40.permission.UA_DATA

android.permission.WAKE_LOCK

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.google.android.c2dm.permission.RECEIVE

android.permission.REQUEST_INSTALL_PACKAGES