General

  • Target

    e3b7840fa024f0568f612fdc9cc16291_JaffaCakes118

  • Size

    9.9MB

  • MD5

    e3b7840fa024f0568f612fdc9cc16291

  • SHA1

    c3f10a79e41d0f2fe0401207ad408143388cffa9

  • SHA256

    cd918a81a7dd88e05d4af6ba65603e52d1c8d9c7ff7e261b9602a93540c83284

  • SHA512

    c480c20b1fc1371dd4cf91b5affea46e4dcf7e70021ce76792527886e012c9645390c78fd793e72bdfe469c3c2386a6561b672c9484b5a378535814ad047ad1f

  • SSDEEP

    196608:zpmE9b8/MxWrChhW2H3HKR08jpAFW6w8aHmkioSf62ua/z4Q6RF/TO:1vF8/MxJ7Wq3KRFn63Umkiv0LF/TO

Score
10/10

Malware Config

Signatures

  • Pegasus family
  • Pegasus payload 1 IoCs
  • Requests dangerous framework permissions 22 IoCs

Files

  • e3b7840fa024f0568f612fdc9cc16291_JaffaCakes118
    .apk android arch:arm arch:x86

    com.lenovo.safecenter

    com.lenovo.safecenter.MainTab.SplashActivity


  • LenovoSafeBox.apk
    .apk android

    com.lenovo.safebox

    com.lenovo.lps.sus.control.SUSPromptActivity


  • LenovoSafeWidget130.apk
    .apk android

    com.lenovo.safecenterwidget

    .DownloadLeSafeActivity


Android Permissions

e3b7840fa024f0568f612fdc9cc16291_JaffaCakes118

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.CALL_PHONE

android.permission.INTERNET

android.permission.CLEAR_APP_CACHE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.READ_OWNER_DATA

android.permission.WRITE_OWNER_DATA

android.permission.CHANGE_CONFIGURATION

android.permission.WRITE_SETTINGS

android.permission.EXPAND_STATUS_BAR

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.FORCE_STOP_PACKAGES

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.SYSTEM_ALERT_WINDOW

android.permission.BATTERY_STATS

android.permission.READ_CONTACTS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.RECEIVE_MMS

android.permission.READ_CALENDAR

android.permission.WRITE_CALENDAR

android.permission.WRITE_CONTACTS

android.permission.WRITE_SMS

android.permission.RESTART_PACKAGES

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_MOCK_LOCATION

com.android.browser.permission.READ_HISTORY_BOOKMARKS

com.android.browser.permission.WRITE_HISTORY_BOOKMARKS

android.permission.VIBRATE

android.permission.PROCESS_OUTGOING_CALLS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.GET_PACKAGE_SIZE

android.permission.READ_LOGS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.CHANGE_NETWORK_STATE

android.permission.MOUNT_FORMAT_FILESYSTEMS

android.permission.RECEIVE_WAP_PUSH

android.permission.BATTERY_STATUS

android.permission.CHANGE_WIFI_STATE

android.permission.BLUETOOTH_ADMIN

android.permission.BLUETOOTH

android.permission.WRITE_SYNC_SETTINGS

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS