a0fe08922e5c9dc631d43cd126621c65_JaffaCakes118

General

Target
a0fe08922e5c9dc631d43cd126621c65_JaffaCakes118
Size 12.6MB
Sample240612-rssb9asbjk
SHA256 093f59e21155961b3103d1b366b1bbc12727bd124c408dd95787323b3ea0792b
MD5 a0fe08922e5c9dc631d43cd126621c65
SHA1 2c84de7e3e38762b1e6669d3f61adfc1cba9bd26
SHA512 e8ba8625deed098121a605597e1b1b4b2b0f2ce74a1ea53a017a77885c78de448b7b59416c00a1d5508a3cf7e767a00f2d6209a3780799dd3d247a8156d6823c
SSDEEP 393216:8fOIqk9YT7PnR97RgPlycEQivGnwetBULr45vOXVqF:xWYT7PYoOptWYBmG
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Required to be able to access the camera device.	android.permission.CAMERA

File Explorer

a0fe08922e5c9dc631d43cd126621c65_JaffaCakes118

.apk 12.6MB

a0fe08922e5c9dc631d43cd126621c65_JaffaCakes118

SHA256 093f59e21155961b3103d1b366b1bbc12727bd124c408dd95787323b3ea0792b
MD5 a0fe08922e5c9dc631d43cd126621c65
SHA1 2c84de7e3e38762b1e6669d3f61adfc1cba9bd26
SHA512 e8ba8625deed098121a605597e1b1b4b2b0f2ce74a1ea53a017a77885c78de448b7b59416c00a1d5508a3cf7e767a00f2d6209a3780799dd3d247a8156d6823c
SSDEEP 393216:8fOIqk9YT7PnR97RgPlycEQivGnwetBULr45vOXVqF:xWYT7PYoOptWYBmG
MD5 SHA1 SHA512 SSDEEP

android

de.nr.android.app.locator.premium

de.reuter.niklas.locator.loc.controller.ui.LocatorController

android.intent.action.MAIN

com.google.android.gms.ads.AdActivity

com.tapjoy.TJCOffersWebView

com.tapjoy.TapjoyFullScreenAdWebView

com.tapjoy.TapjoyVideoView

com.tapjoy.TJAdUnitView

com.tapjoy.mraid.view.ActionHandler

com.tapjoy.mraid.view.Browser

com.tapjoy.TJAdUnitActivity

com.tapjoy.TJContentActivity

com.appodeal.ads.InterstitialActivity

com.appodeal.ads.VideoActivity

com.appodeal.ads.LoaderActivity

com.chartboost.sdk.CBImpressionActivity

com.applovin.adview.AppLovinInterstitialActivity

com.mopub.mobileads.MoPubActivity

com.mopub.common.MoPubBrowser

com.mopub.mobileads.MraidActivity

com.mopub.mobileads.MraidVideoPlayerActivity

org.nexage.sourcekit.mraid.MRAIDBrowser

com.amazon.device.ads.AdActivity

ru.mail.android.mytarget.ads.MyTargetActivity

org.nexage.sourcekit.vast.activity.VASTActivity

org.nexage.sourcekit.vast.activity.VPAIDActivity

com.appodeal.ads.networks.vpaid.VPAIDActivity

com.appodeal.ads.networks.SpotXActivity

com.facebook.ads.InterstitialAdActivity

com.unity3d.ads.android.view.UnityAdsFullscreenActivity

com.unity3d.ads.android2.view.UnityAdsFullscreenActivity

com.jirbo.adcolony.AdColonyOverlay

com.jirbo.adcolony.AdColonyFullscreen

com.jirbo.adcolony.AdColonyBrowser

com.vungle.publisher.FullScreenAdActivity

com.startapp.android.publish.list3d.List3DActivity

com.startapp.android.publish.OverlayActivity

com.startapp.android.publish.FullScreenActivity

com.yandex.mobile.ads.AdActivity

com.inmobi.rendering.InMobiAdActivity

com.flurry.android.FlurryFullscreenTakeoverActivity

Android Permissions

a0fe08922e5c9dc631d43cd126621c65_JaffaCakes118

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

com.google.android.providers.gsf.permission.READ_GSERVICES

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.VIBRATE

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.CAMERA

android.permission.RECEIVE_BOOT_COMPLETED

Sharing

General

Malware Config

Signatures

File Explorer

a0fe08922e5c9dc631d43cd126621c65_JaffaCakes118

de.reuter.niklas.locator.loc.controller.ui.LocatorController

com.google.android.gms.ads.AdActivity

com.tapjoy.TJCOffersWebView

com.tapjoy.TapjoyFullScreenAdWebView

com.tapjoy.TapjoyVideoView

com.tapjoy.TJAdUnitView

com.tapjoy.mraid.view.ActionHandler

com.tapjoy.mraid.view.Browser

com.tapjoy.TJAdUnitActivity

com.tapjoy.TJContentActivity

com.appodeal.ads.InterstitialActivity

com.appodeal.ads.VideoActivity

com.appodeal.ads.LoaderActivity

com.chartboost.sdk.CBImpressionActivity

com.applovin.adview.AppLovinInterstitialActivity

com.mopub.mobileads.MoPubActivity

com.mopub.common.MoPubBrowser

com.mopub.mobileads.MraidActivity

com.mopub.mobileads.MraidVideoPlayerActivity

org.nexage.sourcekit.mraid.MRAIDBrowser

com.amazon.device.ads.AdActivity

ru.mail.android.mytarget.ads.MyTargetActivity

org.nexage.sourcekit.vast.activity.VASTActivity

org.nexage.sourcekit.vast.activity.VPAIDActivity

com.appodeal.ads.networks.vpaid.VPAIDActivity

com.appodeal.ads.networks.SpotXActivity

com.facebook.ads.InterstitialAdActivity

com.unity3d.ads.android.view.UnityAdsFullscreenActivity

com.unity3d.ads.android2.view.UnityAdsFullscreenActivity

com.jirbo.adcolony.AdColonyOverlay

com.jirbo.adcolony.AdColonyFullscreen

com.jirbo.adcolony.AdColonyBrowser

com.vungle.publisher.FullScreenAdActivity

com.startapp.android.publish.list3d.List3DActivity

com.startapp.android.publish.OverlayActivity

com.startapp.android.publish.FullScreenActivity

com.yandex.mobile.ads.AdActivity

com.inmobi.rendering.InMobiAdActivity

com.flurry.android.FlurryFullscreenTakeoverActivity

de.reuter.niklas.locator.loc.service.LocatorService

com.google.android.gms.analytics.CampaignTrackingService

com.yandex.metrica.MetricaService

com.inmobi.signals.activityrecognition.ActivityRecognitionManager

de.reuter.niklas.locator.loc.service.BootCompletedBroadcastReceiver

de.reuter.niklas.locator.loc.service.theftsecurity.LocatorDeviceAdminReceiver

com.google.android.gms.analytics.CampaignTrackingReceiver

com.inmobi.commons.core.utilities.uid.ImIdShareBroadCastReceiver

Android Permissions

a0fe08922e5c9dc631d43cd126621c65_JaffaCakes118