General

  • Target

    a5bf784be5ce72f64682e266d752aacb_JaffaCakes118

  • Size

    192KB

  • MD5

    a5bf784be5ce72f64682e266d752aacb

  • SHA1

    e1ba3442f585f7f29e71b10a3e6fc0f938cb7d60

  • SHA256

    b40afd1e1885cc83087210761cf39c85fcfc115b114dccd82909117984e803be

  • SHA512

    25d22a9e5c9375aefac84f5f8f06d8aecd9745d6b49b0a2b6b05882d21f5bf87059a3db81ff0cf18e966f763b30217a600ce3eabb83242427a8ab40153ce0a28

  • SSDEEP

    6144:Ixg9UGVtV0AWUFQq3iGjHg2ZV8fLNPZqOK:h9UGfOxUFtSOACV8P8T

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • a5bf784be5ce72f64682e266d752aacb_JaffaCakes118
    .apk android

    com.xolo.lumc

    com.app.assists.AdTransActivity


Android Permissions

a5bf784be5ce72f64682e266d752aacb_JaffaCakes118

Permissions

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.GET_ACCOUNTS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.RECEIVE_BOOT_COMPLETED