9d5b850abc27a065a0668b28b0b46b60_JaffaCakes118

General

Target
9d5b850abc27a065a0668b28b0b46b60_JaffaCakes118
Size 14.5MB
Sample240611-htd2ksybme
SHA256 0bb0e693cb71c30f88cb90b0fa6b4c43aeb90a3c0c7734edfa5a551ce1b41f81
MD5 9d5b850abc27a065a0668b28b0b46b60
SHA1 84eb8e1aa465ab8f7431d0272fa6fcee5e8feb15
SHA512 f24850bb18ed0b65823a8716e6fc9d2f8c17d9af1b44394a108b6ef0ba8ddfd506baef2cce915f90bc2c91418d303a1c4d7031f3ff58e0abee6679c0d7109c20
SSDEEP 393216:GcJnNd1vYzSZ6LzMBPol+clxeYjQ/w21T6bcj:tfvtkLAql+clxxiw2a8
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

File Explorer

9d5b850abc27a065a0668b28b0b46b60_JaffaCakes118

.apk 14.5MB
__pasys_remote_banner.jar

.apk 290KB

9d5b850abc27a065a0668b28b0b46b60_JaffaCakes118

SHA256 0bb0e693cb71c30f88cb90b0fa6b4c43aeb90a3c0c7734edfa5a551ce1b41f81
MD5 9d5b850abc27a065a0668b28b0b46b60
SHA1 84eb8e1aa465ab8f7431d0272fa6fcee5e8feb15
SHA512 f24850bb18ed0b65823a8716e6fc9d2f8c17d9af1b44394a108b6ef0ba8ddfd506baef2cce915f90bc2c91418d303a1c4d7031f3ff58e0abee6679c0d7109c20
SSDEEP 393216:GcJnNd1vYzSZ6LzMBPol+clxeYjQ/w21T6bcj:tfvtkLAql+clxxiw2a8
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.xguqb.wid.dvcats

Android Permissions

9d5b850abc27a065a0668b28b0b46b60_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.GET_TASKS

android.permission.ACCESS_COARSE_LOCATION

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY

9d5b850abc27a065a0668b28b0b46b60_JaffaCakes118

great.judy.game.dtezklyx.AppEntry

com.google.android.gms.ads.AdActivity

com.baidu.mobads.AppActivity

com.baidu.appx.ui.BDInnerBrowser

typ.ccg.xkw.lyipelq

z.d.c.ta

z.d.c.ts

com.baidu.appx.app_download.CompleteReceiver

com.baidu.autoupdatesdk.receiver.BDBroadcastReceiver

typ.ccg.xkw.bvtuqsk

__pasys_remote_banner.jar

Sharing

General

Malware Config

Signatures

File Explorer

9d5b850abc27a065a0668b28b0b46b60_JaffaCakes118

great.judy.game.dtezklyx.AppEntry

com.google.android.gms.ads.AdActivity

com.baidu.mobads.AppActivity

com.baidu.appx.ui.BDInnerBrowser

typ.ccg.xkw.lyipelq

z.d.c.ta

z.d.c.ts

com.baidu.appx.app_download.CompleteReceiver

com.baidu.autoupdatesdk.receiver.BDBroadcastReceiver

typ.ccg.xkw.bvtuqsk

__pasys_remote_banner.jar

Android Permissions

9d5b850abc27a065a0668b28b0b46b60_JaffaCakes118