accf084020fb48239034b9df4ccce5e8_JaffaCakes118

General

Target
accf084020fb48239034b9df4ccce5e8_JaffaCakes118
Size 3.5MB
Sample240615-ejctzsyckg
SHA256 acc9f01363e3aafa1a6fbecb656b13abe353acce8013d132377fa00f9b15516b
MD5 accf084020fb48239034b9df4ccce5e8
SHA1 065dc73bc57a795652ae1ec1394075d54b11c7f0
SHA512 d276d6e8a46c1b87def6772040ce8fbdba2f797b466249baf643e6ec7c6e13fb9e9568b63c22742b2b85eda8faf0650b4483c361c0909b2afccf088255f963d7
SSDEEP 98304:ZrmnX8tjoQ1Bu0YWi1esV0JWhBNND3VZ9B/laiFlMtjcFGRBqlLAnaSF7pQo4ZTz:FU4s0fi4sV06NX3GRol8nx9k
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

File Explorer

accf084020fb48239034b9df4ccce5e8_JaffaCakes118

.apk 3.5MB

accf084020fb48239034b9df4ccce5e8_JaffaCakes118

SHA256 acc9f01363e3aafa1a6fbecb656b13abe353acce8013d132377fa00f9b15516b
MD5 accf084020fb48239034b9df4ccce5e8
SHA1 065dc73bc57a795652ae1ec1394075d54b11c7f0
SHA512 d276d6e8a46c1b87def6772040ce8fbdba2f797b466249baf643e6ec7c6e13fb9e9568b63c22742b2b85eda8faf0650b4483c361c0909b2afccf088255f963d7
SSDEEP 98304:ZrmnX8tjoQ1Bu0YWi1esV0JWhBNND3VZ9B/laiFlMtjcFGRBqlLAnaSF7pQo4ZTz:FU4s0fi4sV06NX3GRol8nx9k
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.tachograph.mobilephonen

Android Permissions

accf084020fb48239034b9df4ccce5e8_JaffaCakes118

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.CAMERA

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CALL_PHONE

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECORD_AUDIO

android.permission.READ_CONTACTS

android.permission.SEND_SMS

android.permission.WRITE_SMS

android.permission.READ_PHONE_STATE

com.android.vending.CHECK_LICENSE

com.google.android.providers.gsf.permission.READ_GSERVICES

com.pokevian.app.caroo.permission.MAPS_RECEIVE

com.pokevian.app.caroo.permission.LAUNCH

accf084020fb48239034b9df4ccce5e8_JaffaCakes118

com.pokevian.app.caroo.activity.MainActivity

com.pokevian.app.caroo.activity.IntroActivity

com.pokevian.app.caroo.activity.SettingsActivity

com.pokevian.app.caroo.activity.DrivingActivity

com.pokevian.app.caroo.activity.DrivingDetailInfoActivity

com.pokevian.app.caroo.activity.VideoListActivity

com.pokevian.app.caroo.activity.VideoPlayActivity

com.pokevian.app.caroo.activity.TripListActivity

com.pokevian.app.caroo.activity.RatingActivity

com.pokevian.app.caroo.activity.CrashActivity

com.google.ads.AdActivity

com.bangcle.everisk.stub.NewActivity

com.pokevian.app.caroo.service.MainService

com.pokevian.app.caroo.service.MetadataService

com.pokevian.app.caroo.service.DrivingModeDetectService

com.pokevian.app.caroo.service.ShowRatingService

com.pokevian.app.caroo.service.CrashDetectService

com.pokevian.app.caroo.service.FloatingButtonService

com.pokevian.app.caroo.receiver.BootCompletedReceiver

com.pokevian.app.caroo.service.DrivingModeDetectService$Receiver

com.pokevian.app.caroo.recovery.ProcessRecoverer$Receiver

com.bangcle.everisk.stub.AlarmReceiver

Sharing

General

Malware Config

Signatures

File Explorer

accf084020fb48239034b9df4ccce5e8_JaffaCakes118

com.pokevian.app.caroo.activity.MainActivity

com.pokevian.app.caroo.activity.IntroActivity

com.pokevian.app.caroo.activity.SettingsActivity

com.pokevian.app.caroo.activity.DrivingActivity

com.pokevian.app.caroo.activity.DrivingDetailInfoActivity

com.pokevian.app.caroo.activity.VideoListActivity

com.pokevian.app.caroo.activity.VideoPlayActivity

com.pokevian.app.caroo.activity.TripListActivity

com.pokevian.app.caroo.activity.RatingActivity

com.pokevian.app.caroo.activity.CrashActivity

com.google.ads.AdActivity

com.bangcle.everisk.stub.NewActivity

com.pokevian.app.caroo.service.MainService

com.pokevian.app.caroo.service.MetadataService

com.pokevian.app.caroo.service.DrivingModeDetectService

com.pokevian.app.caroo.service.ShowRatingService

com.pokevian.app.caroo.service.CrashDetectService

com.pokevian.app.caroo.service.FloatingButtonService

com.pokevian.app.caroo.receiver.BootCompletedReceiver

com.pokevian.app.caroo.service.DrivingModeDetectService$Receiver

com.pokevian.app.caroo.recovery.ProcessRecoverer$Receiver

com.bangcle.everisk.stub.AlarmReceiver

Android Permissions

accf084020fb48239034b9df4ccce5e8_JaffaCakes118