General

  • Target

    fd60d64add4d579b5328c995de64e466_JaffaCakes118

  • Size

    1.2MB

  • MD5

    fd60d64add4d579b5328c995de64e466

  • SHA1

    e3afd99e85b949133bc03d1e2ffe6a02140c736d

  • SHA256

    5869129ba90c0b115173d44e1a8301eeca0394cc6411c17d06c99ee332b77e96

  • SHA512

    fbe3dab6c5b1d2313cab8dbeb443413b573a01db5e85d086fd3e72bce0e622aec6e22f4fb344fa9ea8d459dfcf88d36a9c0cf109cf11e5a7ba3bfe49ddabfd07

  • SSDEEP

    24576:uyo+kS2Tp7x/wKy6VfUaGeczH39VLe3lFBuPr:Boe+x/wKvfUplzje3lFBwr

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 3 IoCs

Files

  • fd60d64add4d579b5328c995de64e466_JaffaCakes118
    .apk android arch:arm

    app.greyshirts.firewall

    com.jobernowl.MainActivity


Android Permissions

fd60d64add4d579b5328c995de64e466_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.GET_TASKS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_NETWORK_STATE