General

  • Target

    fe03736759f2164ecc0d3fc42421a005_JaffaCakes118

  • Size

    4.6MB

  • MD5

    fe03736759f2164ecc0d3fc42421a005

  • SHA1

    bf3078d2513390a084bf0d50cb90e111c12c1c1e

  • SHA256

    76bfae062e70126381b887a58a3a9b78785c0e9d03ec1a4179e11879dd9cb22a

  • SHA512

    841aa1abda60c72a95c23e4d159cb79d159987213a59e43c82451d4da72af994fa90c29f247a70b498f04607f627335e9ab900ad357ec65f46c026e3f291ac62

  • SSDEEP

    98304:YiB2NMpoMfC2mCBrgjvESdP1MXes2u8/lSAPR/7vuPC:YiB2NMDmAg4Sd9MXe19JJ/C6

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • fe03736759f2164ecc0d3fc42421a005_JaffaCakes118
    .apk android arch:arm

    de.blinkt.openvpn

    de.blinkt.openvpn.activities.MainActivity


Android Permissions

fe03736759f2164ecc0d3fc42421a005_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_EXTERNAL_STORAGE

android.permission.FOREGROUND_SERVICE