f983bd5acc31195e75a864d09afb5b95_JaffaCakes118

General

Target

f983bd5acc31195e75a864d09afb5b95_JaffaCakes118
Size

17.8MB
MD5

f983bd5acc31195e75a864d09afb5b95
SHA1

7dd51796beae8cc90f075c3e489917eb792c8219
SHA256

7ec877f3d6d63a2009d2845bc6cb1c3dd9c98472d38587d7452fba0a0ab2bd22
SHA512

ae5595be5662fbbb2c355c4219d07c8bbd621516ef09fa1e811bff203fe0265657921af77f35fa02ca5d05f41ac22958f565935183d9a6400a2532572ece1333
SSDEEP

393216:47jBvpTBzBgiprWlU4cWfDzAymPDbbgnkA+PSV4kd:47jBvpTlBgoWlU4FDzAHPfbiB+G4c

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 3 IoCs

description	ioc
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu.	android.permission.BIND_QUICK_SETTINGS_TILE
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu.	android.permission.BIND_QUICK_SETTINGS_TILE

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS

Files

f983bd5acc31195e75a864d09afb5b95_JaffaCakes118
.apk android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

com.adguard.android

com.adguard.android.ui.SplashActivity

Activities

com.adguard.android.ui.SplashActivity

android.intent.action.MAIN

com.adguard.android.ui.TileServicePreferenceActivity

android.service.quicksettings.action.QS_TILE_PREFERENCES

com.adguard.android.ui.ShortcutActivity

android.intent.action.CREATE_SHORTCUT
com.adguard.android.ui.ShortcutActivity

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.GET_TASKS
android.permission.VIBRATE
android.permission.BLUETOOTH
android.permission.PACKAGE_USAGE_STATS

Receivers

com.adguard.android.receivers.BootUpReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
com.htc.intent.action.QUICKBOOT_POWERON

com.adguard.android.receivers.UpdateReceiver

android.intent.action.MY_PACKAGE_REPLACED

com.adguard.android.receivers.NetworkStateReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.net.wifi.WIFI_STATE_CHANGED
android.net.wifi.LINK_CONFIGURATION_CHANGED
android.hardware.usb.action.USB_STATE
android.net.wifi.WIFI_AP_STATE_CHANGED
android.bluetooth.device.action.ACL_CONNECTED
android.bluetooth.device.action.ACL_DISCONNECTED

com.adguard.android.widget.WidgetProvider

android.appwidget.action.APPWIDGET_UPDATE

com.adguard.android.receivers.LicenseKeyBroadcastReceiver

com.adguard.android.LICENSE_KEY

com.amazon.device.iap.ResponseReceiver

com.amazon.inapp.purchasing.NOTIFY

Services

com.adguard.android.vpn.AdguardVpnService

android.net.VpnService

com.adguard.android.AdguardTileService

android.service.quicksettings.action.QS_TILE

com.adguard.android.OutboundProxyTileService

android.service.quicksettings.action.QS_TILE

Android Permissions

f983bd5acc31195e75a864d09afb5b95_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.VIBRATE

android.permission.BLUETOOTH

android.permission.PACKAGE_USAGE_STATS

Sharing

General

Malware Config

Signatures

Files

com.adguard.android

com.adguard.android.ui.SplashActivity

Activities

com.adguard.android.ui.SplashActivity

com.adguard.android.ui.TileServicePreferenceActivity

com.adguard.android.ui.ShortcutActivity

Permissions

Receivers

com.adguard.android.receivers.BootUpReceiver

com.adguard.android.receivers.UpdateReceiver

com.adguard.android.receivers.NetworkStateReceiver

com.adguard.android.widget.WidgetProvider

com.adguard.android.receivers.LicenseKeyBroadcastReceiver

com.amazon.device.iap.ResponseReceiver

Services

com.adguard.android.vpn.AdguardVpnService

com.adguard.android.AdguardTileService

com.adguard.android.OutboundProxyTileService

Android Permissions

f983bd5acc31195e75a864d09afb5b95_JaffaCakes118