net.coolcan.tvlive.activity.StartActivity
android.intent.action.MAIN
android.intent.action.VIEW
Behavioral task
behavioral1
Sample
9df8b50b9ad56368143a89133135140d_JaffaCakes118.apk
Resource
android-x86-arm-20240603-en
Behavioral task
behavioral2
Sample
gdtadv2.apk
Resource
android-x86-arm-20240603-en
Target
9df8b50b9ad56368143a89133135140d_JaffaCakes118
Size
13.5MB
MD5
9df8b50b9ad56368143a89133135140d
SHA1
f0982b7da21fb3e5aa60f8014809ae590ba5650b
SHA256
7b2a841361f21bb0817c67247c914dfc09cdeb3f0b07525e944274974ec17f25
SHA512
7ff25bf67939afebe4eaea04736bff21be3b31d33b8ee2c863ba57a89b719a3580814e7201e1b22fb8f2bafa0a8398a503d604cfeb538b8cf7e39253e37b4da0
SSDEEP
393216:F43neC7KXENCvSq2DN5/eNKYnHUysv0aa417HmF:F43nKX+CQDj/eAkHUyzP4c
Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
resource | yara_rule |
---|---|
sample | patched_upx |
resource | yara_rule |
---|---|
sample | upx |
description | ioc |
---|---|
Allows an application to write to external storage. | android.permission.WRITE_EXTERNAL_STORAGE |
Allows an application to read from external storage. | android.permission.READ_EXTERNAL_STORAGE |
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. | android.permission.READ_PHONE_STATE |
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. | android.permission.SYSTEM_ALERT_WINDOW |
Allows access to the list of accounts in the Accounts Service. | android.permission.GET_ACCOUNTS |
Allows an app to access precise location. | android.permission.ACCESS_FINE_LOCATION |
Allows an app to access approximate location. | android.permission.ACCESS_COARSE_LOCATION |
Allows an application to request installing packages. | android.permission.REQUEST_INSTALL_PACKAGES |
Required to be able to access the camera device. | android.permission.CAMERA |
Allows an application to read or write the system settings. | android.permission.WRITE_SETTINGS |
Allows an application to record audio. | android.permission.RECORD_AUDIO |
android.intent.action.MAIN
android.intent.action.VIEW
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.WAKE_LOCK
android.permission.VIBRATE
android.permission.GET_ACCOUNTS
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.CAMERA
android.permission.FLASHLIGHT
android.permission.CHANGE_WIFI_MULTICAST_STATE
android.permission.WRITE_SETTINGS
android.permission.RECORD_AUDIO
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.WAKE_LOCK
android.permission.VIBRATE
android.permission.GET_ACCOUNTS
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.CAMERA
android.permission.FLASHLIGHT
android.permission.CHANGE_WIFI_MULTICAST_STATE
android.permission.WRITE_SETTINGS
android.permission.RECORD_AUDIO