Overview

overview

8

Static

static

8

ebbe2a1fe9...18.apk

android-9-x86

8

ebbe2a1fe9...18.apk

android-10-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    ebbe2a1fe946144be7b299d8e1aa3a5f_JaffaCakes118

  • Size

    19.4MB

  • MD5

    ebbe2a1fe946144be7b299d8e1aa3a5f

  • SHA1

    5dd3701b1b856b4c04060defea78941339668efa

  • SHA256

    b16ccc77603ed6e1f90b1da4e4850e213797970d61ebd22c83ab4f6b264572cd

  • SHA512

    d534db67a05f345310583028b7eeaf42ab9d146d167735a9a1ffa14c7ea606bdda903a285e9ada7dd24d6d3f3abacfb170b1aa4f08b767724a52c57d95471dc2

  • SSDEEP

    393216:BfwXsL8NT4M0WgTRoQhUI46mP8yvat6dVNdKyP7f7qnPx9HHFh7X:BfAswubWO5B47Uyc6LNd34HHfX

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 2 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Requests dangerous framework permissions 10 IoCs

Files

  • ebbe2a1fe946144be7b299d8e1aa3a5f_JaffaCakes118
    .apk android arch:arm arch:x64

    com.linewell.operation

    com.linewell.operation.activity.LoginActivity


Android Permissions

ebbe2a1fe946144be7b299d8e1aa3a5f_JaffaCakes118

Permissions

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.READ_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CAMERA

android.permission.CALL_PHONE

android.permission.RECORD_AUDIO

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.GET_TASKS

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

getui.permission.GetuiService.com.linewell.operation

android.permission.WAKE_LOCK

android.permission.FLASHLIGHT