ac518865e3385ceb04f9ee73ecd7036a_JaffaCakes118

General

Target
ac518865e3385ceb04f9ee73ecd7036a_JaffaCakes118
Size 28.4MB
Sample240615-a99t7axbpl
SHA256 30e2c3d0a105d97071200e9252ecd44986bea607ff2c77aa68cc5e47d75937a1
MD5 ac518865e3385ceb04f9ee73ecd7036a
SHA1 25ad3ed44c8b49c411f9d99408b04d73b7ad2abf
SHA512 b20927d25911098c7fcb6ef66e54d501bd2d4d0f412e76b5c220eef7235d15fd90194d541d973a205e100b69736a4f5cdac81e2e36511fc65fcf71aba076d5a2
SSDEEP 786432:i4ko+pQfEBxiSAffDb2dXH7QbRZsHmfE3U5:i4rEBkcX7QbvzB5
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

File Explorer

ac518865e3385ceb04f9ee73ecd7036a_JaffaCakes118

.apk 28.4MB

ac518865e3385ceb04f9ee73ecd7036a_JaffaCakes118

SHA256 30e2c3d0a105d97071200e9252ecd44986bea607ff2c77aa68cc5e47d75937a1
MD5 ac518865e3385ceb04f9ee73ecd7036a
SHA1 25ad3ed44c8b49c411f9d99408b04d73b7ad2abf
SHA512 b20927d25911098c7fcb6ef66e54d501bd2d4d0f412e76b5c220eef7235d15fd90194d541d973a205e100b69736a4f5cdac81e2e36511fc65fcf71aba076d5a2
SSDEEP 786432:i4ko+pQfEBxiSAffDb2dXH7QbRZsHmfE3U5:i4rEBkcX7QbvzB5
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.korebee.ottomandefence

Android Permissions

ac518865e3385ceb04f9ee73ecd7036a_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

com.android.vending.BILLING

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.GET_TASKS

android.permission.SYSTEM_ALERT_WINDOW

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.ACCESS_WIFI_STATE

ac518865e3385ceb04f9ee73ecd7036a_JaffaCakes118

com.prime31.UnityPlayerNativeActivity

com.heyzap.sdk.ads.MediationTestActivity

com.heyzap.sdk.ads.HeyzapInterstitialActivity

com.heyzap.sdk.ads.HeyzapVideoActivity

com.chartboost.sdk.CBDialogActivity

com.chartboost.sdk.CBImpressionActivity

com.prime31.GoogleIABProxyActivity

com.google.ads.AdActivity

com.datacp.andtool.QOuterCPActivity

com.datacp.andtool.QActivity

com.yiwanadsdk.activity.YiwanAdActivity

com.datacp.andtool.QServicem

com.yiwanadsdk.service.GameDownloadService

com.yiwanadsdk.service.SmallGameDownloadService

com.heyzap.sdk.ads.PackageAddedReceiver

com.google.ads.InstallReceiver

com.datacp.andtool.QReceiverm

com.yiwanadsdk.receiver.BootReceiver

Sharing

General

Malware Config

Signatures

File Explorer

ac518865e3385ceb04f9ee73ecd7036a_JaffaCakes118

com.prime31.UnityPlayerNativeActivity

com.heyzap.sdk.ads.MediationTestActivity

com.heyzap.sdk.ads.HeyzapInterstitialActivity

com.heyzap.sdk.ads.HeyzapVideoActivity

com.chartboost.sdk.CBDialogActivity

com.chartboost.sdk.CBImpressionActivity

com.prime31.GoogleIABProxyActivity

com.google.ads.AdActivity

com.datacp.andtool.QOuterCPActivity

com.datacp.andtool.QActivity

com.yiwanadsdk.activity.YiwanAdActivity

com.datacp.andtool.QServicem

com.yiwanadsdk.service.GameDownloadService

com.yiwanadsdk.service.SmallGameDownloadService

com.heyzap.sdk.ads.PackageAddedReceiver

com.google.ads.InstallReceiver

com.datacp.andtool.QReceiverm

com.yiwanadsdk.receiver.BootReceiver

Android Permissions

ac518865e3385ceb04f9ee73ecd7036a_JaffaCakes118