a75fd8e060caabb1739d60e9c1675490_JaffaCakes118

General

Target
a75fd8e060caabb1739d60e9c1675490_JaffaCakes118
Size 30.4MB
Sample240614-a3z2easalm
SHA256 34369d49bed0ab57b0d23d4974703a7420941c67799833d4c052c12a07b10d7f
MD5 a75fd8e060caabb1739d60e9c1675490
SHA1 9c8d03d0d38987e4147b754515e0a887b72c00a7
SHA512 3c4702feb98c454044e92dfa64292a1ce19bd4b45309dd5931777bd4212c7f167ddf9c1081d58f47551ab21d64ff86ca2b5bc6906f66fcb9a2c766d845431f1e
SSDEEP 786432:DvLxKyPVmwhWslYTHdrQnT/fIi0J7YmfBTos9FvPha:DvLVtH7uTHFQbIblf19FnQ
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

File Explorer

a75fd8e060caabb1739d60e9c1675490_JaffaCakes118

.apk 30.4MB

a75fd8e060caabb1739d60e9c1675490_JaffaCakes118

SHA256 34369d49bed0ab57b0d23d4974703a7420941c67799833d4c052c12a07b10d7f
MD5 a75fd8e060caabb1739d60e9c1675490
SHA1 9c8d03d0d38987e4147b754515e0a887b72c00a7
SHA512 3c4702feb98c454044e92dfa64292a1ce19bd4b45309dd5931777bd4212c7f167ddf9c1081d58f47551ab21d64ff86ca2b5bc6906f66fcb9a2c766d845431f1e
SSDEEP 786432:DvLxKyPVmwhWslYTHdrQnT/fIi0J7YmfBTos9FvPha:DvLVtH7uTHFQbIblf19FnQ
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:x86

com.abluewind.lupinturn

Android Permissions

a75fd8e060caabb1739d60e9c1675490_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

com.android.vending.BILLING

android.permission.READ_PHONE_STATE

com.android.vending.CHECK_LICENSE

android.permission.WRITE_EXTERNAL_STORAGE

a75fd8e060caabb1739d60e9c1675490_JaffaCakes118

com.unity3d.player.UnityPlayerNativeActivity

com.androidnative.billing.core.AN_BillingProxyActivity

com.androidnative.gms.core.GooglePlaySupportActivity

com.androidnative.AndroidNativeProxy

com.unity3d.player.UnityPlayerActivity

com.androidnative.features.social.common.SocialProxyActivity

com.google.android.gms.ads.AdActivity

com.jirbo.adcolony.AdColonyOverlay

com.jirbo.adcolony.AdColonyFullscreen

com.jirbo.adcolony.AdColonyBrowser

com.applovin.adview.AppLovinInterstitialActivity

com.applovin.adview.AppLovinConfirmationActivity

com.heyzap.sdk.ads.MediationTestActivity

com.heyzap.sdk.ads.HeyzapProxyActivity

com.heyzap.sdk.ads.VASTActivity

com.heyzap.sdk.ads.HeyzapInterstitialActivity

com.heyzap.sdk.ads.HeyzapVideoActivity

com.unity3d.ads.android.view.UnityAdsFullscreenActivity

com.igaworks.IgawReceiver

com.heyzap.sdk.ads.PackageAddedReceiver

Sharing

General

Malware Config

Signatures

File Explorer

a75fd8e060caabb1739d60e9c1675490_JaffaCakes118

com.unity3d.player.UnityPlayerNativeActivity

com.androidnative.billing.core.AN_BillingProxyActivity

com.androidnative.gms.core.GooglePlaySupportActivity

com.androidnative.AndroidNativeProxy

com.unity3d.player.UnityPlayerActivity

com.androidnative.features.social.common.SocialProxyActivity

com.google.android.gms.ads.AdActivity

com.jirbo.adcolony.AdColonyOverlay

com.jirbo.adcolony.AdColonyFullscreen

com.jirbo.adcolony.AdColonyBrowser

com.applovin.adview.AppLovinInterstitialActivity

com.applovin.adview.AppLovinConfirmationActivity

com.heyzap.sdk.ads.MediationTestActivity

com.heyzap.sdk.ads.HeyzapProxyActivity

com.heyzap.sdk.ads.VASTActivity

com.heyzap.sdk.ads.HeyzapInterstitialActivity

com.heyzap.sdk.ads.HeyzapVideoActivity

com.unity3d.ads.android.view.UnityAdsFullscreenActivity

com.igaworks.IgawReceiver

com.heyzap.sdk.ads.PackageAddedReceiver

Android Permissions

a75fd8e060caabb1739d60e9c1675490_JaffaCakes118