0ff1812e39164d59ad6aac76370b76da_JaffaCakes118

General

Target
0ff1812e39164d59ad6aac76370b76da_JaffaCakes118
Size 1.5MB
Sample240625-3lb78stamp
SHA256 4ebe863a075c18ac2e586afc6b358b641d88b58785fce6a46f63bac415da4a36
MD5 0ff1812e39164d59ad6aac76370b76da
SHA1 2a988f53e14ed58240f15aaf61465ac5e282a38b
SHA512 a19650f2e7bfc0b16bf98c8321ebd5cbf70c96ff0a75a74448b573a616596bda91e0a3be5eb1da136effab8e7dd60e0c41f3f4a614fb8696f8b93c0dcd7aa684
SSDEEP 49152:nsggVZtG4UQDd0WQrqnJcUUutrgxbXpFRC3Iac8R:LgktQDyWQrqnJkutkBXZCDT
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 4 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

File Explorer

0ff1812e39164d59ad6aac76370b76da_JaffaCakes118

.apk 1.5MB
__pasys_remote_banner.jar

.apk 108KB

0ff1812e39164d59ad6aac76370b76da_JaffaCakes118

SHA256 4ebe863a075c18ac2e586afc6b358b641d88b58785fce6a46f63bac415da4a36
MD5 0ff1812e39164d59ad6aac76370b76da
SHA1 2a988f53e14ed58240f15aaf61465ac5e282a38b
SHA512 a19650f2e7bfc0b16bf98c8321ebd5cbf70c96ff0a75a74448b573a616596bda91e0a3be5eb1da136effab8e7dd60e0c41f3f4a614fb8696f8b93c0dcd7aa684
SSDEEP 49152:nsggVZtG4UQDd0WQrqnJcUUutrgxbXpFRC3Iac8R:LgktQDyWQrqnJkutkBXZCDT
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:mips arch:x86

igudi.com.gdmusic

Android Permissions

0ff1812e39164d59ad6aac76370b76da_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.READ_LOGS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_TASKS

0ff1812e39164d59ad6aac76370b76da_JaffaCakes118

.gdmusicActivity

com.umeng.fb.ConversationActivity

com.umeng.fb.ContactActivity

com.umeng.update.UpdateDialogActivity

com.baidu.mobads.AppActivity

com.umeng.update.net.DownloadingService

__pasys_remote_banner.jar

Sharing

General

Malware Config

Signatures

File Explorer

0ff1812e39164d59ad6aac76370b76da_JaffaCakes118

.gdmusicActivity

com.umeng.fb.ConversationActivity

com.umeng.fb.ContactActivity

com.umeng.update.UpdateDialogActivity

com.baidu.mobads.AppActivity

com.umeng.update.net.DownloadingService

__pasys_remote_banner.jar

Android Permissions

0ff1812e39164d59ad6aac76370b76da_JaffaCakes118