Overview

overview

8

Static

static

8

b2689740b4...18.apk

android-9-x86

1

amap_resou..._0.apk

android-9-x86

amap_resou..._0.apk

android-10-x64

amap_resou..._0.apk

android-11-x64

libinject.apk

android-9-x86

1

libinject.apk

android-10-x64

1

libinject.apk

android-11-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b2689740b40f1fa61aa6f49e9a30cb08_JaffaCakes118

  • Size

    16.5MB

  • MD5

    b2689740b40f1fa61aa6f49e9a30cb08

  • SHA1

    fe524a4aa20115bf4048e72910028047dcc8234b

  • SHA256

    adb03687845ad8c1f533e1cc739f880bae0303c324c9bef7c17cc33e1d6de358

  • SHA512

    e0f77589165b0e5416d72e17b444bed645e07f331fd30eb609e4530a18a7354ef4e25055d4c437bcc5dbf201a3b2d8a351f2f24e5751f4af9fece729fec69988

  • SSDEEP

    196608:r4aEhx/lksPtlP93o1svvpaJ6hX4qOfSJ0Cy8xdxKjzEgXW7U6mVAyta4pAOKOYQ:r45/NF33Hg8hIdqqUII46m4OYAYiRGi

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 1 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Requests dangerous framework permissions 6 IoCs

Files

  • b2689740b40f1fa61aa6f49e9a30cb08_JaffaCakes118
    .apk android arch:arm

    com.lerist.fakelocation

    com.lerist.fakelocation.ui.activity.MainActivity


  • amap_resource1_0_0.png
    .apk android

    com.amap.api.map3d


  • libinject.so
    .apk android

    com.lerist.hookFileList.injectdex


Android Permissions

b2689740b40f1fa61aa6f49e9a30cb08_JaffaCakes118

Permissions

android.permission.CHANGE_WIFI_STATE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_MOCK_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.FOREGROUND_SERVICE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

com.android.vending.BILLING

android.permission.READ_LOGS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.GET_TASKS