General

  • Target

    fc2c7b4352902bd5f01c9548b3dba36e_JaffaCakes118

  • Size

    2.7MB

  • MD5

    fc2c7b4352902bd5f01c9548b3dba36e

  • SHA1

    0aac91278f4f6d50d8eae9ef198fa0bf898ef8e1

  • SHA256

    273fedd80466c2181e0eab966ed28271feec4e1dd10d4d54b19a1c888034305c

  • SHA512

    db8f17db95b560e271108be8c875bc90128e4bde626aca8f5b181e9e3a68553dabdbb2c4e018ab98934b85acdb05c2219cc1cadacb464b6187a5db757ff6b67d

  • SSDEEP

    49152:bA9TM+PKi89+QqxjhdHIfwi3E99TPFK1RtDagwzHcbB3C5qEJzcuB4eRNU3nVMMP:ETM889TqxldH6wiUPF2POgwzQw5qEhBY

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 8 IoCs

Files

  • fc2c7b4352902bd5f01c9548b3dba36e_JaffaCakes118
    .apk android arch:arm64 arch:arm

    net.nurik.roman.dashclock

    com.google.android.apps.dashclock.configuration.ConfigurationActivity


Android Permissions

fc2c7b4352902bd5f01c9548b3dba36e_JaffaCakes118

Permissions

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.GET_ACCOUNTS

com.google.android.gm.permission.READ_CONTENT_PROVIDER

android.permission.READ_CALENDAR

android.permission.READ_CALL_LOG

android.permission.READ_CONTACTS

android.permission.READ_SMS

com.google.android.apps.dashclock.permission.READ_EXTENSION_DATA

com.google.android.apps.dashclock.permission.BIND_DATA_CONSUMER

android.permission.READ_PHONE_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_WIFI_STATE