957ee94b33acf6a8a482574dadf4a5d3_JaffaCakes118

General

Target
957ee94b33acf6a8a482574dadf4a5d3_JaffaCakes118
Size 699KB
Sample240604-tsxcbacf21
SHA256 b30b41d71137a23f0a7c29c7954b781998db9f2b2440b6ba8cca5debc2127a92
MD5 957ee94b33acf6a8a482574dadf4a5d3
SHA1 61f82866aaf3144660d5c46ed527206514c8b21f
SHA512 1606b5ecc2441545604827439ed12bd8272c130f971d629871f811f957ae1ccfd1f20bad15cf75486113bc7ca4ccdd7719cf5dc224f4c4658b97f6be579a654f
SSDEEP 12288:GsGhcUBzjcKDtU9Cq2TbD6+iBshVBhJ0BxZyiUH7mycKqDFTIKn1MQWnA+RhffmP:GsG3rt2CVK+iGhVBEB+H7KFTJ+REP
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS

File Explorer

957ee94b33acf6a8a482574dadf4a5d3_JaffaCakes118

.apk 699KB
Fluent.apk

.apk 414KB

957ee94b33acf6a8a482574dadf4a5d3_JaffaCakes118

SHA256 b30b41d71137a23f0a7c29c7954b781998db9f2b2440b6ba8cca5debc2127a92
MD5 957ee94b33acf6a8a482574dadf4a5d3
SHA1 61f82866aaf3144660d5c46ed527206514c8b21f
SHA512 1606b5ecc2441545604827439ed12bd8272c130f971d629871f811f957ae1ccfd1f20bad15cf75486113bc7ca4ccdd7719cf5dc224f4c4658b97f6be579a654f
SSDEEP 12288:GsGhcUBzjcKDtU9Cq2TbD6+iBshVBhJ0BxZyiUH7mycKqDFTIKn1MQWnA+RhffmP:GsG3rt2CVK+iGhVBEB+H7KFTJ+REP
MD5 SHA1 SHA512 SSDEEP

android

com.gladder.videoyy

Fluent.apk

SHA256 9ef6b169afbf9f140dfba4cad958c6a096ffbcf05a707fc43f5d8e0449f62407
MD5 3d596b729e275c8822001b56934f3acc
SHA1 2230deddd141c20ecc3a6c2ead933107802494a9
SHA512 9287a05b4e9b7ede8b7a1f12cca41339c5fa5b04723a052fe9176b5f40afb4a837d3f01948af3741ea4eb49680ab9c02a325cee5be83556567f758a646741636
SSDEEP 12288:NsGhcUBzjcKDtU9Cq2TbD6+iBshVBhJ0BxZyiUD:NsG3rt2CVK+iGhVBEB+D
MD5 SHA1 SHA512 SSDEEP

android

com.fluent.xyzgg

Android Permissions

957ee94b33acf6a8a482574dadf4a5d3_JaffaCakes118

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.GET_ACCOUNTS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.GET_ACCOUNTS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.RECEIVE_BOOT_COMPLETED

957ee94b33acf6a8a482574dadf4a5d3_JaffaCakes118

com.gladder.videoyy.MainActivity

com.gladder.videoyy.IcoActivity

com.eeoe.rqaoqk.hofaa

com.eeoe.rqaoqk.zalqr

com.eeoe.rqaoqk.ocakk

Fluent.apk

com.fluent.xyzgg.HomeActivity

com.fluent.xyzgg.MainActivity

com.fluent.xyzgg.PassWordActivity

Sharing

General

Malware Config

Signatures

File Explorer

957ee94b33acf6a8a482574dadf4a5d3_JaffaCakes118

com.gladder.videoyy.MainActivity

com.gladder.videoyy.IcoActivity

com.eeoe.rqaoqk.hofaa

com.eeoe.rqaoqk.zalqr

com.eeoe.rqaoqk.ocakk

Fluent.apk

com.fluent.xyzgg.HomeActivity

com.fluent.xyzgg.MainActivity

com.fluent.xyzgg.PassWordActivity

Android Permissions

957ee94b33acf6a8a482574dadf4a5d3_JaffaCakes118