Resubmissions

20-09-2024 11:07

240920-m8ec4stckp 10

General

  • Target

    ed738d7d020745c3fae12c73af78062b_JaffaCakes118

  • Size

    2.4MB

  • MD5

    ed738d7d020745c3fae12c73af78062b

  • SHA1

    ef3930277875a7e4a84b591ce31972f92c81e64d

  • SHA256

    e2de72782e08f156bdb34bf313a2b4ee5bd6ebe79db3779eb19972c95c14333f

  • SHA512

    0ecc341c7d4e1eeb61c6b7b8887d0e23fc99f60d10782b6d24ecb6fd54b6c32b080c97588231d8b73afafcd384aaece27cef30a81f9d138fe1315c12b3b18d8f

  • SSDEEP

    49152:R2oZCbUQ4igLXowZrV5rfQPScZWkKwWaPt7+eoZT6rkOEgbZXOI:R2oop4vVZrbL3cZWJct74Tqz

Score
10/10

Malware Config

Extracted

Family

ahmyth

C2

http://193.161.193.99:63546

Signatures

  • Ahmyth family
  • Requests dangerous framework permissions 11 IoCs

Files

  • ed738d7d020745c3fae12c73af78062b_JaffaCakes118
    .apk android

    com.pchat.pchat

    com.pchat.pchat.MainActivity


Android Permissions

ed738d7d020745c3fae12c73af78062b_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.GET_ACCOUNTS

android.permission.WAKE_LOCK

android.permission.VIBRATE

com.google.android.c2dm.permission.RECEIVE

com.pchat.pchat.permission.C2D_MESSAGE

android.permission.CAMERA

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.READ_CALL_LOG

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_CONTACTS