a5fa0af55f435003229b1d215d5acd73_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
a5fa0af55f435003229b1d215d5acd73_JaffaCakes118
Size 2.6MB
Sample240613-rlpyjssdlc
SHA256 a74ab3f301d72ee25ac13e3d820a704ae920896975e5352d10220dfce9505e9b
MD5 a5fa0af55f435003229b1d215d5acd73
SHA1 13c27fc74258f1800dc66e4d007458f80b5adf21
SHA512 a3853ca8a5af3684e30abce1cd5699b0f2824d5283823964231d3c5bc73501981e4ce0cf722ec9fa0a0f52915793d9c7f134b934bffb62f27497b08f18f64420
SSDEEP 24576:g7RhotfGK3Xgzhp8mDSj34MXHluPfSi2UeqlojW9vGJnnRgyRFtcj8QnAwFcOLEb:uyvXgUmDZEFCkUqa9vGJnn5RFtcTpg
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 14 IoCs

description	ioc
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to write and read the user's call log data.	android.permission.WRITE_CALL_LOG
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to use SIP service.	android.permission.USE_SIP

File Explorer

a5fa0af55f435003229b1d215d5acd73_JaffaCakes118

.apk 2.6MB

a5fa0af55f435003229b1d215d5acd73_JaffaCakes118

SHA256 a74ab3f301d72ee25ac13e3d820a704ae920896975e5352d10220dfce9505e9b
MD5 a5fa0af55f435003229b1d215d5acd73
SHA1 13c27fc74258f1800dc66e4d007458f80b5adf21
SHA512 a3853ca8a5af3684e30abce1cd5699b0f2824d5283823964231d3c5bc73501981e4ce0cf722ec9fa0a0f52915793d9c7f134b934bffb62f27497b08f18f64420
SSDEEP 24576:g7RhotfGK3Xgzhp8mDSj34MXHluPfSi2UeqlojW9vGJnnRgyRFtcj8QnAwFcOLEb:uyvXgUmDZEFCkUqa9vGJnn5RFtcTpg
MD5 SHA1 SHA512 SSDEEP

android

com.android.phone

android.permission.BIND_CALL_SERVICE android.permission.BROADCAST_STICKY android.permission.CALL_PHONE android.permission.CALL_PRIVILEGED android.permission.WRITE_SETTINGS android.permission.WRITE_SECURE_SETTINGS android.permission.READ_CONTACTS android.permission.READ_CALL_LOG android.permission.WRITE_CONTACTS android.permission.WRITE_CALL_LOG android.permission.SYSTEM_ALERT_WINDOW android.permission.INTERNAL_SYSTEM_WINDOW android.permission.VIBRATE android.permission.BLUETOOTH android.permission.BLUETOOTH_ADMIN android.permission.REORDER_TASKS android.permission.CHANGE_CONFIGURATION android.permission.WAKE_LOCK android.permission.MODIFY_AUDIO_SETTINGS android.permission.STATUS_BAR android.permission.READ_SMS android.permission.WRITE_SMS android.permission.SEND_SMS android.permission.SEND_RESPOND_VIA_MESSAGE android.permission.SET_TIME_ZONE android.permission.ACCESS_WIFI_STATE android.permission.READ_PHONE_STATE android.permission.MODIFY_PHONE_STATE android.permission.DEVICE_POWER android.permission.DISABLE_KEYGUARD android.permission.INTERNET android.permission.PROCESS_OUTGOING_CALLS android.permission.ACCESS_COARSE_LOCATION android.permission.WRITE_APN_SETTINGS android.permission.BROADCAST_SMS android.permission.BROADCAST_WAP_PUSH android.permission.CHANGE_WIFI_STATE android.permission.ACCESS_NETWORK_STATE android.permission.CHANGE_NETWORK_STATE android.permission.RECEIVE_BOOT_COMPLETED android.permission.SHUTDOWN android.permission.RECORD_AUDIO android.permission.PERFORM_CDMA_PROVISIONING android.permission.USE_SIP android.permission.REBOOT android.permission.UPDATE_LOCK android.permission.INTERACT_ACROSS_USERS_FULL com.android.smspush.WAPPUSH_MANAGER_BIND android.permission.MANAGE_USERS android.permission.UPDATE_APP_OPS_STATS android.permission.CONNECTIVITY_INTERNAL android.permission.SET_PREFERRED_APPLICATIONS android.permission.STOP_APP_SWITCHES

EmergencyDialer

com.android.phone.EmergencyDialer.DIAL com.android.phone.EmergencyDialer.DIAL

ADNList

SimContacts

android.intent.action.VIEW

FdnList

android.intent.action.VIEW

OutgoingCallBroadcaster

android.intent.action.CALL android.intent.action.CALL android.intent.action.CALL android.intent.action.CALL

InCallScreenShowActivation

com.android.phone.PERFORM_CDMA_PROVISIONING

MobileNetworkSettings

android.intent.action.VIEW android.intent.action.MAIN android.settings.DATA_ROAMING_SETTINGS

NetworkSetting

android.intent.action.MAIN android.settings.NETWORK_OPERATOR_SETTINGS

GsmUmtsOptions

android.intent.action.MAIN

CdmaOptions

android.intent.action.MAIN

GsmUmtsCallOptions

android.intent.action.MAIN

CdmaCallOptions

android.intent.action.MAIN

GsmUmtsCallForwardOptions

android.intent.action.MAIN

GsmUmtsAdditionalCallOptions

android.intent.action.MAIN

CellBroadcastSms

android.intent.action.MAIN

FdnSetting

android.intent.action.MAIN

EnableFdnScreen

EnableIccPinScreen

android.intent.action.MAIN

ChangeIccPinScreen

android.intent.action.MAIN

GetPin2Screen

EditFdnContactScreen

DeleteFdnContactScreen

DataRoamingReenable

android.intent.action.MAIN

RoamingSetting

android.intent.action.MAIN

CallFeaturesSetting

android.intent.action.VIEW android.intent.action.MAIN com.android.phone.CallFeaturesSetting.ADD_VOICEMAIL

EmergencyCallbackModeExitDialog

com.android.phone.action.ACTION_SHOW_ECM_EXIT_DIALOG android.intent.action.ACTION_SHOW_NOTICE_ECM_BLOCK_OTHERS

.sip.SipSettings

android.intent.action.MAIN android.net.sip.NOTIFY

.sip.SipEditor

.SipCallOptionHandler

RespondViaSmsManager$Settings

android.intent.action.MAIN

ErrorDialogActivity

MMIDialogActivity

.TextMessagePackageChooser

HfaActivity

Android Permissions

a5fa0af55f435003229b1d215d5acd73_JaffaCakes118

Permissions

android.permission.BIND_CALL_SERVICE

android.permission.BROADCAST_STICKY

android.permission.CALL_PHONE

android.permission.CALL_PRIVILEGED

android.permission.WRITE_SETTINGS

android.permission.WRITE_SECURE_SETTINGS

android.permission.READ_CONTACTS

android.permission.READ_CALL_LOG

android.permission.WRITE_CONTACTS

android.permission.WRITE_CALL_LOG

android.permission.SYSTEM_ALERT_WINDOW

android.permission.INTERNAL_SYSTEM_WINDOW

android.permission.VIBRATE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.REORDER_TASKS

android.permission.CHANGE_CONFIGURATION

android.permission.WAKE_LOCK

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.STATUS_BAR

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.SEND_SMS

android.permission.SEND_RESPOND_VIA_MESSAGE

android.permission.SET_TIME_ZONE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.MODIFY_PHONE_STATE

android.permission.DEVICE_POWER

android.permission.DISABLE_KEYGUARD

android.permission.INTERNET

android.permission.PROCESS_OUTGOING_CALLS

android.permission.ACCESS_COARSE_LOCATION

android.permission.WRITE_APN_SETTINGS

android.permission.BROADCAST_SMS

android.permission.BROADCAST_WAP_PUSH

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SHUTDOWN

android.permission.RECORD_AUDIO

android.permission.PERFORM_CDMA_PROVISIONING

android.permission.USE_SIP

android.permission.REBOOT

android.permission.UPDATE_LOCK

android.permission.INTERACT_ACROSS_USERS_FULL

com.android.smspush.WAPPUSH_MANAGER_BIND

android.permission.MANAGE_USERS

android.permission.UPDATE_APP_OPS_STATS

Sharing

General

Malware Config

Signatures

File Explorer

a5fa0af55f435003229b1d215d5acd73_JaffaCakes118

EmergencyDialer

ADNList

SimContacts

FdnList

OutgoingCallBroadcaster

InCallScreenShowActivation

MobileNetworkSettings

NetworkSetting

GsmUmtsOptions

CdmaOptions

GsmUmtsCallOptions

CdmaCallOptions

GsmUmtsCallForwardOptions

GsmUmtsAdditionalCallOptions

CellBroadcastSms

FdnSetting

EnableFdnScreen

EnableIccPinScreen

ChangeIccPinScreen

GetPin2Screen

EditFdnContactScreen

DeleteFdnContactScreen

DataRoamingReenable

RoamingSetting

CallFeaturesSetting

EmergencyCallbackModeExitDialog

.sip.SipSettings

.sip.SipEditor

.SipCallOptionHandler

RespondViaSmsManager$Settings

ErrorDialogActivity

MMIDialogActivity

.TextMessagePackageChooser

HfaActivity

NetworkQueryService

ClearMissedCallsService

BluetoothPhoneService

EmergencyCallbackModeService

TelephonyDebugService

HfaService

ProcessOutgoingCallTest

OtaStartupReceiver

SipBroadcastReceiver

CallerInfoCacheUpdateReceiver

PhoneGlobals$NotificationBroadcastReceiver

IccProvider

Android Permissions

a5fa0af55f435003229b1d215d5acd73_JaffaCakes118