9b607904aa56c90b9fc12fcdcbda5df2_JaffaCakes118

General

Target
9b607904aa56c90b9fc12fcdcbda5df2_JaffaCakes118
Size 16.8MB
Sample240610-vf9ybathmk
SHA256 7332e431508ec8860b3333d0a122b1c42c3bdbb885980910853db0dd4ba8d8ed
MD5 9b607904aa56c90b9fc12fcdcbda5df2
SHA1 89f9f7c495f7ce7e9bb272dd1354aec9e00864cc
SHA512 82dc4c2120c5df870c7af64275b3652678a3515132f8d963ea0188471cdbbd06635044d17515a7391b9bde30d6b5a0c9510543c5ac6ca61c1c513177f3e2b581
SSDEEP 393216:V82xihiYNne8kmSzcZ3et/cGj7/a+3hmel0S595ahcnlL:VCgAAi3eBt7Th70SYGnJ
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

File Explorer

9b607904aa56c90b9fc12fcdcbda5df2_JaffaCakes118

.apk 16.8MB

9b607904aa56c90b9fc12fcdcbda5df2_JaffaCakes118

SHA256 7332e431508ec8860b3333d0a122b1c42c3bdbb885980910853db0dd4ba8d8ed
MD5 9b607904aa56c90b9fc12fcdcbda5df2
SHA1 89f9f7c495f7ce7e9bb272dd1354aec9e00864cc
SHA512 82dc4c2120c5df870c7af64275b3652678a3515132f8d963ea0188471cdbbd06635044d17515a7391b9bde30d6b5a0c9510543c5ac6ca61c1c513177f3e2b581
SSDEEP 393216:V82xihiYNne8kmSzcZ3et/cGj7/a+3hmel0S595ahcnlL:VCgAAi3eBt7Th70SYGnJ
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.of3d.cf.Activitys

Android Permissions

9b607904aa56c90b9fc12fcdcbda5df2_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.CHANGE_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

9b607904aa56c90b9fc12fcdcbda5df2_JaffaCakes118

CFActivity

com.google.ads.AdActivity

cn.domob.android.ads.DomobActivity

com.adwo.adsdk.AdwoAdBrowserActivity

com.adwo.adsdk.AdwoSplashAdActivity

com.mobisage.android.MobiSageActivity

com.baidu.mobads.AppActivity

com.tencent.mobwin.MobinWINBrowserActivity

com.tencent.ad.MainActivity

com.tencent.ad.BoutiqueActivity

com.mt.airad.MultiAD

com.mobisage.android.MobiSageApkService

com.tencent.ad.MainService

com.tencent.ad.MainReceiver

Sharing

General

Malware Config

Signatures

File Explorer

9b607904aa56c90b9fc12fcdcbda5df2_JaffaCakes118

CFActivity

com.google.ads.AdActivity

cn.domob.android.ads.DomobActivity

com.adwo.adsdk.AdwoAdBrowserActivity

com.adwo.adsdk.AdwoSplashAdActivity

com.mobisage.android.MobiSageActivity

com.baidu.mobads.AppActivity

com.tencent.mobwin.MobinWINBrowserActivity

com.tencent.ad.MainActivity

com.tencent.ad.BoutiqueActivity

com.mt.airad.MultiAD

com.mobisage.android.MobiSageApkService

com.tencent.ad.MainService

com.tencent.ad.MainReceiver

Android Permissions

9b607904aa56c90b9fc12fcdcbda5df2_JaffaCakes118