9ce2406e05e20cd153ff5e9e7e0f5e13_JaffaCakes118

General

Target
9ce2406e05e20cd153ff5e9e7e0f5e13_JaffaCakes118
Size 602KB
Sample240611-eap3ysshme
SHA256 6dc315f4084c21a72978629e0af70f0836c2ade0cf28d87d66794e7a713386cc
MD5 9ce2406e05e20cd153ff5e9e7e0f5e13
SHA1 9dc2a818e695b06af636812ec699ec3ea615dbe5
SHA512 237bf42aff370120d97624f64dad67eef943d3914bfbe462e1f98b64d81c6a66f5738bcf782b4c28165170a6645d785730756946f4972f1a311ac66d7df8fdbb
SSDEEP 12288:AEaFZvkGGNUuWW1NVwCKn6GAx1d9H1BxyMGl9fDHxUNYL0JpX79Y1y:AEaFmFN9v46flH7xyVfNGFL93
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

File Explorer

9ce2406e05e20cd153ff5e9e7e0f5e13_JaffaCakes118

.apk 602KB

9ce2406e05e20cd153ff5e9e7e0f5e13_JaffaCakes118

SHA256 6dc315f4084c21a72978629e0af70f0836c2ade0cf28d87d66794e7a713386cc
MD5 9ce2406e05e20cd153ff5e9e7e0f5e13
SHA1 9dc2a818e695b06af636812ec699ec3ea615dbe5
SHA512 237bf42aff370120d97624f64dad67eef943d3914bfbe462e1f98b64d81c6a66f5738bcf782b4c28165170a6645d785730756946f4972f1a311ac66d7df8fdbb
SSDEEP 12288:AEaFZvkGGNUuWW1NVwCKn6GAx1d9H1BxyMGl9fDHxUNYL0JpX79Y1y:AEaFmFN9v46flH7xyVfNGFL93
MD5 SHA1 SHA512 SSDEEP

android

feifei.tnd11.meta.face

Android Permissions

9ce2406e05e20cd153ff5e9e7e0f5e13_JaffaCakes118

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.READ_PHONE_STATE

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.ACCESS_WIFI_STATE

android.permission.GET_ACCOUNTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

com.android.launcher.permission.READ_SETTINGS

android.permission.ACCESS_WIFI_STATE

9ce2406e05e20cd153ff5e9e7e0f5e13_JaffaCakes118

com.fhk.pig.tndface.MainActivity

com.fhk.pig.tndface.BronewSec

com.wnyiq.iecyvtd.zxpe

com.fhk.pig.tndface.Servic

com.wnyiq.iecyvtd.rjvud

com.fhk.pig.tndface.FzuiyeReceiver

com.pbf.s2smain.s.MainReceiver

com.wnyiq.iecyvtd.hljo

Sharing

General

Malware Config

Signatures

File Explorer

9ce2406e05e20cd153ff5e9e7e0f5e13_JaffaCakes118

com.fhk.pig.tndface.MainActivity

com.fhk.pig.tndface.BronewSec

com.wnyiq.iecyvtd.zxpe

com.fhk.pig.tndface.Servic

com.wnyiq.iecyvtd.rjvud

com.fhk.pig.tndface.FzuiyeReceiver

com.pbf.s2smain.s.MainReceiver

com.wnyiq.iecyvtd.hljo

Android Permissions

9ce2406e05e20cd153ff5e9e7e0f5e13_JaffaCakes118