Overview

overview

6

Static

static

6

cf302b7def...18.apk

android-9-x86

1

cf302b7def...18.apk

android-10-x64

1

cf302b7def...18.apk

android-11-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    cf302b7def20d11ef553efb542cd1c29_JaffaCakes118

  • Size

    4.2MB

  • MD5

    cf302b7def20d11ef553efb542cd1c29

  • SHA1

    f741f28e05920fb5b71c91eac3832118c7604b64

  • SHA256

    b95d3d7bfd06a0d67fe643a850f97a713befc1204f6e4b7a030dfaba924c12f1

  • SHA512

    c0c1acd9b2ffe84270a42bf0b6f8f2c7c26acf7ac527e93fcf119e776ebb238cf6140ba694831212454f3b791edb7a12cd4679d2a6c614a191294b36171e9edb

  • SSDEEP

    98304:Y11o+c3A0R8IEVsaZEnffWAs1umifK4wUro:Y1GPA0R8BVsn7maR8

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 4 IoCs

Files

  • cf302b7def20d11ef553efb542cd1c29_JaffaCakes118
    .apk android

    com.offsec.nethunter

    com.offsec.nethunter.AppNavHomeActivity


Android Permissions

cf302b7def20d11ef553efb542cd1c29_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

com.offsec.nhterm.permission.RUN_SCRIPT

com.offsec.nhterm.permission.RUN_SCRIPT_SU

com.offsec.nhterm.permission.RUN_SCRIPT_NH

com.offsec.nhterm.permission.RUN_SCRIPT_NH_LOGIN

com.offsec.nhvnc.permission.OPEN_VNC_CONN

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION