General

  • Target

    b2ac48268f6a8a76aba914d1ca364ac8_JaffaCakes118

  • Size

    19.9MB

  • MD5

    b2ac48268f6a8a76aba914d1ca364ac8

  • SHA1

    d018b0c20daaa834d13a63c049f25cae1baa2006

  • SHA256

    94aee3b6504b6e01e5efc8542bd22ca1008b35706942d577b1cc6ef25d72a1ea

  • SHA512

    a8af9813f80356ae750972efbf4b2fe9024826061fa65509847de652a09010ff6afbfac8d70e060ae8d9513c522ae22bdb7ec4552db01df82a760dbec176534f

  • SSDEEP

    393216:Lbtf4kqx0jOcl0BehymjA8qqGJAcIQisU3G8GRSyXgkLBO6Z:XB+x0jpl0BGjA8qqItisUNRdkF

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 10 IoCs

Files

  • b2ac48268f6a8a76aba914d1ca364ac8_JaffaCakes118
    .apk android arch:arm

    com.tzqfl

    com.uzmap.pkg.EntranceActivity


Android Permissions

b2ac48268f6a8a76aba914d1ca364ac8_JaffaCakes118

Permissions

android.permission.INTERNET

com.huawei.android.launcher.permission.CHANGE_BADGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.CAMERA

android.permission.READ_PHONE_STATE

android.permission.RECORD_AUDIO

android.permission.FLASHLIGHT

android.permission.BLUETOOTH_ADMIN

android.permission.BLUETOOTH

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.RECEIVE_USER_PRESENT

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_MEDIA_STORAGE

com.tzqfl.permission.JPUSH_MESSAGE

android.permission.READ_SETTINGS

android.permission.RUN_INSTRUMENTATION

android.permission.CHANGE_CONFIGURATION

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.GET_TASKS

android.permission.CHANGE_NETWORK_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS