ef536ebb5a17eefbc2fccee268ed2a51_JaffaCakes118

General

Target

ef536ebb5a17eefbc2fccee268ed2a51_JaffaCakes118
Size

3.2MB
MD5

ef536ebb5a17eefbc2fccee268ed2a51
SHA1

2cedb2ee65fb634537975ee2fefae2bd1de9d4b1
SHA256

44452443cbe651e35f562a1c34e6e3f8357c6ccf1f5aeea0323a673f726fdf7b
SHA512

5d42a6aefc787d94c7c1a2cd532ff95d8b13906cfc0e7df8acbaebe24350486902bf942f28051a2014a820e75672f54a0b6b07752e941f8694e6a2b6c325daf2
SSDEEP

98304:kJ/o8Fc9U4anyQ+WhUp7wKhhTki9q24iBWoID:E/qU4anuWh+8R24DDD

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 22 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Files

ef536ebb5a17eefbc2fccee268ed2a51_JaffaCakes118
.apk android

com.googles.systemopt

com.googles.systemopt.activity.MainActivity

Activities

com.googles.systemopt.activity.MainActivity

android.intent.action.MAIN
custom.intent.action.START
android.intent.action.mainintentex

Permissions

android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.GET_ACCOUNTS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_WIFI_STATE
android.permission.GET_TASKS
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.GET_TASKS
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.READ_SETTINGS
android.permission.READ_SYNC_SETTINGS
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_SETTINGS
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.INTERNET
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.READ_SETTINGS
android.permission.READ_SYNC_SETTINGS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
android.permission.ACCESS_ALL_DOWNLOADS

Receivers

com.googles.systemopt.receiver.GmobiReceiver

android.intent.action.PACKAGE_ADDED

org.bi.track.ConnectionReceiver

com.virgo.trick.action

com.virgo.qao.hotfix.upgrade.UpdateDownloadReceiver

android.intent.action.DOWNLOAD_COMPLETE

com.virgo.qao.task.InstallReceiver

android.intent.action.PACKAGE_ADDED

com.googles.systemopt.download.DownloadReceiver

android.intent.action.USER_PRESENT
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.BOOT_COMPLETED
android.intent.action.DOWNLOAD_WAKEUP

com.googles.systemopt.receiver.KernalReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
custom.intent.action.DOWNLOAD_COMPLETE
android.intent.action.BOOT_COMPLETED
android.intent.action.USER_PRESENT
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.BATTERY_LOW
android.intent.action.BATTERY_OKAY

com.qcl.dsu.Vxre

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.BOOT_COMPLETED

com.small.project.reveiver.Receiver

android.net.wifi.WIFI_STATE_CHANGED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REPLACED
android.intent.action.PACKAGE_REMOVED
extra.rec1

Services

com.googles.systemopt.services.KernalService

custom.intent.action.KERNAL_SHOW
custom.intent.action.KERNAL_DOWNLOAD_COMPLETED
custom.intent.action.KERNAL_PACKAGE_ADDED

com.qcl.dsu.Tvs

com.pad.export.MobiService.ACTION

com.sdk.ss.bb

com.config.canon.enable

com.cloudtech.ads.tp.NLService

android.service.notification.NotificationListenerService

fduo.sywafdysmaxcd.jowkecdca.gjrmt.wagtqxlbhcpywv

com.android.service.UpdateService
extra.ser2.i

fduo.sywafdysmaxcd.jowkecdca.maxlk.tsydvlcmlb

extra.ser1.i

Android Permissions

ef536ebb5a17eefbc2fccee268ed2a51_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.GET_ACCOUNTS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.GET_TASKS

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.READ_SETTINGS

android.permission.READ_SYNC_SETTINGS

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_SETTINGS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.READ_SETTINGS

android.permission.READ_SYNC_SETTINGS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

Sharing

General

Malware Config

Signatures

Files

com.googles.systemopt

com.googles.systemopt.activity.MainActivity

Activities

com.googles.systemopt.activity.MainActivity

Permissions

Receivers

com.googles.systemopt.receiver.GmobiReceiver

org.bi.track.ConnectionReceiver

com.virgo.qao.hotfix.upgrade.UpdateDownloadReceiver

com.virgo.qao.task.InstallReceiver

com.googles.systemopt.download.DownloadReceiver

com.googles.systemopt.receiver.KernalReceiver

com.qcl.dsu.Vxre

com.small.project.reveiver.Receiver

Services

com.googles.systemopt.services.KernalService

com.qcl.dsu.Tvs

com.sdk.ss.bb

com.cloudtech.ads.tp.NLService

fduo.sywafdysmaxcd.jowkecdca.gjrmt.wagtqxlbhcpywv

fduo.sywafdysmaxcd.jowkecdca.maxlk.tsydvlcmlb

Android Permissions

ef536ebb5a17eefbc2fccee268ed2a51_JaffaCakes118