ab15729267440848de6b7a16e23e7cb6_JaffaCakes118

General

Target
ab15729267440848de6b7a16e23e7cb6_JaffaCakes118
Size 1.5MB
Sample240614-wva8zavfnn
SHA256 947e43c613e5206d92412afe0736a099a2232587d8848d56c99d3456f339c7d9
MD5 ab15729267440848de6b7a16e23e7cb6
SHA1 288d00a198a876304a093b3ceff2e6591bf0d986
SHA512 6c010180134081860b29e3c0c56c5cc961fb8a8c8d7687582a7185c4db267227f353e3607580f1b09874e5fcdef14ca9efcaa45c6b3fad90d520ef8caf93a20b
SSDEEP 24576:vrykDn0Dx+fgSYI3MBjUw3y+xOngjewk6oZUiN5pMhe4Xyo8lwpaX0Nfi:vrX0QfIlCKOngj1wN5G3XRk
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 13 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to receive WAP push messages.	android.permission.RECEIVE_WAP_PUSH
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

File Explorer

ab15729267440848de6b7a16e23e7cb6_JaffaCakes118

.apk 1.5MB

ab15729267440848de6b7a16e23e7cb6_JaffaCakes118

SHA256 947e43c613e5206d92412afe0736a099a2232587d8848d56c99d3456f339c7d9
MD5 ab15729267440848de6b7a16e23e7cb6
SHA1 288d00a198a876304a093b3ceff2e6591bf0d986
SHA512 6c010180134081860b29e3c0c56c5cc961fb8a8c8d7687582a7185c4db267227f353e3607580f1b09874e5fcdef14ca9efcaa45c6b3fad90d520ef8caf93a20b
SSDEEP 24576:vrykDn0Dx+fgSYI3MBjUw3y+xOngjewk6oZUiN5pMhe4Xyo8lwpaX0Nfi:vrX0QfIlCKOngj1wN5G3XRk
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.hd.android

Android Permissions

ab15729267440848de6b7a16e23e7cb6_JaffaCakes118

Permissions

android.permission.FLASHLIGHT

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_SMS

android.permission.RECEIVE_MMS

android.permission.RECEIVE_SMS

android.permission.RECEIVE_WAP_PUSH

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_CALL_LOG

android.permission.READ_CONTACTS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

android.permission.CHANGE_WIFI_STATE

ab15729267440848de6b7a16e23e7cb6_JaffaCakes118

hd.fish.WxMonitor.ui.MainActivity

hd.fish.WxMonitor.ui.TestActivity

hd.fish.WxMonitor.ui.HideActivity

hd.fish.WxMonitor.ui.HideScreenActivity

com.bangcle.everisk.stub.NewActivity

com.amap.api.location.APSService

hd.fish.WxMonitor.WxAccessibilityService

hd.fish.WxMonitor.Server.CoreServer

hd.fish.WxMonitor.Server.SmsServer

hd.fish.WxMonitor.Server.CallServer

hd.fish.WxMonitor.Server.LocationServer

hd.fish.WxMonitor.Server.ScreenshotService

hd.fish.WxMonitor.Server.MyJobService

hd.fish.WxMonitor.BroadRecver.BootServer

com.bangcle.everisk.stub.AlarmReceiver

Sharing

General

Malware Config

Signatures

File Explorer

ab15729267440848de6b7a16e23e7cb6_JaffaCakes118

hd.fish.WxMonitor.ui.MainActivity

hd.fish.WxMonitor.ui.TestActivity

hd.fish.WxMonitor.ui.HideActivity

hd.fish.WxMonitor.ui.HideScreenActivity

com.bangcle.everisk.stub.NewActivity

com.amap.api.location.APSService

hd.fish.WxMonitor.WxAccessibilityService

hd.fish.WxMonitor.Server.CoreServer

hd.fish.WxMonitor.Server.SmsServer

hd.fish.WxMonitor.Server.CallServer

hd.fish.WxMonitor.Server.LocationServer

hd.fish.WxMonitor.Server.ScreenshotService

hd.fish.WxMonitor.Server.MyJobService

hd.fish.WxMonitor.BroadRecver.BootServer

com.bangcle.everisk.stub.AlarmReceiver

Android Permissions

ab15729267440848de6b7a16e23e7cb6_JaffaCakes118