a3b1a4048faca5c644b5e271b5490ed6_JaffaCakes118

General

Target
a3b1a4048faca5c644b5e271b5490ed6_JaffaCakes118
Size 8.3MB
Sample240613-d5qsassgrh
SHA256 cd817d2595fc0af82e21a46bc443d8b80064078d81411fef2cbfede58b86173c
MD5 a3b1a4048faca5c644b5e271b5490ed6
SHA1 ab30a492eed803f1b0cd92002b16fe9b1d14607a
SHA512 3cced9f375378bfcce746cf6fd8e22c128648e73b702c728ffeeabd72c8d7828521ef09e00d4da22edc8350bebb92a5259580305e1e13b3c218d672567542eac
SSDEEP 98304:Cw7JCMHN91vHZ/XuXEXvXdXsMX4XmKv+yXvCX1vGpOFzeUz7H3j9OBrLlWNb0g8F:JbHFv/vlvGpOl0P5CND7e/775
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

File Explorer

a3b1a4048faca5c644b5e271b5490ed6_JaffaCakes118

.apk 8.3MB

a3b1a4048faca5c644b5e271b5490ed6_JaffaCakes118

SHA256 cd817d2595fc0af82e21a46bc443d8b80064078d81411fef2cbfede58b86173c
MD5 a3b1a4048faca5c644b5e271b5490ed6
SHA1 ab30a492eed803f1b0cd92002b16fe9b1d14607a
SHA512 3cced9f375378bfcce746cf6fd8e22c128648e73b702c728ffeeabd72c8d7828521ef09e00d4da22edc8350bebb92a5259580305e1e13b3c218d672567542eac
SSDEEP 98304:Cw7JCMHN91vHZ/XuXEXvXdXsMX4XmKv+yXvCX1vGpOFzeUz7H3j9OBrLlWNb0g8F:JbHFv/vlvGpOl0P5CND7e/775
MD5 SHA1 SHA512 SSDEEP

android arch:arm

ru.taxamobile

Android Permissions

a3b1a4048faca5c644b5e271b5490ed6_JaffaCakes118

Permissions

android.permission.CAMERA

android.permission.VIBRATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.RECORD_AUDIO

android.permission.RECORD_VIDEO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.GET_ACCOUNTS

android.permission.BROADCAST_STICKY

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.GET_TASKS

android.permission.READ_EXTERNAL_STORAGE

com.google.android.c2dm.permission.RECEIVE

android.permission.USE_CREDENTIALS

a3b1a4048faca5c644b5e271b5490ed6_JaffaCakes118

ru.taxamobile.Application

ru.taxamobile.DialogActivity

ru.taxamobile.foregroundcameraplugin.CameraActivity

com.google.android.gms.ads.AdActivity

com.google.android.gms.ads.purchase.InAppPurchaseActivity

ru.taxamobile.TaxaService

com.google.android.gms.measurement.AppMeasurementService

ru.taxamobile.Receiver

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.android.gms.measurement.AppMeasurementContentProvider

Sharing

General

Malware Config

Signatures

File Explorer

a3b1a4048faca5c644b5e271b5490ed6_JaffaCakes118

ru.taxamobile.Application

ru.taxamobile.DialogActivity

ru.taxamobile.foregroundcameraplugin.CameraActivity

com.google.android.gms.ads.AdActivity

com.google.android.gms.ads.purchase.InAppPurchaseActivity

ru.taxamobile.TaxaService

com.google.android.gms.measurement.AppMeasurementService

ru.taxamobile.Receiver

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.android.gms.measurement.AppMeasurementContentProvider

Android Permissions

a3b1a4048faca5c644b5e271b5490ed6_JaffaCakes118