1124fd51cc5fdcc6ac4fe26eec8e61ec_JaffaCakes118

General

Target

1124fd51cc5fdcc6ac4fe26eec8e61ec_JaffaCakes118
Size

1.5MB
MD5

1124fd51cc5fdcc6ac4fe26eec8e61ec
SHA1

c7bc823b8d92f7817c51822e89b19638f68ebab1
SHA256

999cdf9ab5449d4c9c5618b2900887dd9061f50e5c73440b3e5a5dc0a0cfc9dd
SHA512

800c17562e7591a2b3a0337d5a919f50c7e62d14f59948c4e2d034ba7df19b88a8516496892e9d8122680e86add955b191d254b25e6ce8f5324ca902120b7347
SSDEEP

24576:cua1UhMbJnNl8hMwK4EDdFkiM52+GcC7mXgvEX/ivlqptH6FSYQCWwU:cT1nNHISrm4+GcCuU9QYQC0

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Files

1124fd51cc5fdcc6ac4fe26eec8e61ec_JaffaCakes118
.apk android

com.hardrock.qbcljgsputwmvx

.ScreenOffActivity

Activities

.ScreenOffActivity

android.intent.action.MAIN

.DeviceAdmin$Controller

android.intent.action.MAIN

com.unity3d.loadvgweb.Vaa

android.intent.action.CREATE_SHORTCUT

Permissions

android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WAKE_LOCK
android.permission.DISABLE_KEYGUARD
android.permission.READ_PHONE_STATE
android.permission.PROCESS_OUTGOING_CALLS
android.permission.EXPAND_STATUS_BAR
android.permission.VIBRATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.CAMERA
android.permission.FLASHLIGHT
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.GET_TASKS

Receivers

.ScreenOffReceiver

android.intent.action.BOOT_COMPLETED

ScreenOffWidget

android.appwidget.action.APPWIDGET_UPDATE
com.hardrock.qbcljgsputwmvx.CHANGE_SCREENOFF_ICON

StatusBarWidget

android.appwidget.action.APPWIDGET_UPDATE
com.hardrock.qbcljgsputwmvx.CHANGE_STATUSBAR_ICON

FlashLightWidget

android.appwidget.action.APPWIDGET_UPDATE
com.hardrock.qbcljgsputwmvx.CHANGE_FLASHLIGHT_ICON

.DeviceAdmin

android.app.action.DEVICE_ADMIN_ENABLED

com.unity3d.loadbbweb.JR

android.intent.action.PACKAGE_ADDED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

com.unity3d.loadvgweb.Vrr

android.intent.action.PACKAGE_ADDED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

com.billing.WebReceiver

android.intent.action.PACKAGE_ADDED
android.net.conn.CONNECTIVITY_CHANGE

com.unity3d.loadkp.playerkr

android.intent.action.PACKAGE_ADDED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

Services

Android Permissions

1124fd51cc5fdcc6ac4fe26eec8e61ec_JaffaCakes118

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.DISABLE_KEYGUARD

android.permission.READ_PHONE_STATE

android.permission.PROCESS_OUTGOING_CALLS

android.permission.EXPAND_STATUS_BAR

android.permission.VIBRATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CAMERA

android.permission.FLASHLIGHT

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.GET_TASKS

Sharing

General

Malware Config

Signatures

Files

com.hardrock.qbcljgsputwmvx

.ScreenOffActivity

Activities

.ScreenOffActivity

.DeviceAdmin$Controller

com.unity3d.loadvgweb.Vaa

Permissions

Receivers

.ScreenOffReceiver

ScreenOffWidget

StatusBarWidget

FlashLightWidget

.DeviceAdmin

com.unity3d.loadbbweb.JR

com.unity3d.loadvgweb.Vrr

com.billing.WebReceiver

com.unity3d.loadkp.playerkr

Services

Android Permissions

1124fd51cc5fdcc6ac4fe26eec8e61ec_JaffaCakes118