2614b3a925aea689a7c724af63b2e7ba_JaffaCakes118

General

Target

2614b3a925aea689a7c724af63b2e7ba_JaffaCakes118
Size

1.0MB
MD5

2614b3a925aea689a7c724af63b2e7ba
SHA1

893fa603f5bb52196017367615df6bfd98e3d9aa
SHA256

7e4d80af2873b784b4edd629f8fa31e0f66e10e3261072cff112fb91727dfe3c
SHA512

15566c8408417bdc5aa3aac85ebbacdb8b56154a4aad1247b9f8573d074f9e909802eb558295fa84e8b544e1afb6b535018abb385e886ec839f6b8e2a07ad971
SSDEEP

24576:Y/xpRC01hm5dN9qusnp0+gjdGcXq0WeylUBCdB/Ldj9r7E027UwMB3mG7Kza8f:Y9Cp5ousnp07dGc609Inr7E027UwMB3y

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 14 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Files

2614b3a925aea689a7c724af63b2e7ba_JaffaCakes118
.apk android arch:arm

protect.eye.spirit1

protect.eye.spirit.ConfigActivity

Activities

protect.eye.spirit.ConfigActivity

android.intent.action.MAIN

protect.eye.spirit.k.Wqzl

android.intent.action.CREATE_SHORTCUT

Permissions

android.permission.GET_TASKS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.FLASHLIGHT
android.permission.CAMERA
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.GET_TASKS
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.GET_TASKS
android.permission.INTERNET
android.permission.WAKE_LOCK
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE

Receivers

protect.eye.spirit.service.BootBroadCast

android.intent.action.BOOT_COMPLETED

com.cloudyway.adwindow.BootBroadCast

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE

protect.eye.spirit.g.Pmdu

android.intent.action.PACKAGE_ADDED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

protect.eye.spirit.q.Hc

android.intent.action.PACKAGE_ADDED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

protect.eye.spirit.k.Rzoz

android.intent.action.PACKAGE_ADDED
android.intent.action.USER_PRESENT
android.net.conn.CONNECTIVITY_CHANGE

protect.eye.spirit.f.Lo

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

Services

Android Permissions

2614b3a925aea689a7c724af63b2e7ba_JaffaCakes118

Permissions

android.permission.GET_TASKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FLASHLIGHT

android.permission.CAMERA

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

Sharing

General

Malware Config

Signatures

Files

protect.eye.spirit1

protect.eye.spirit.ConfigActivity

Activities

protect.eye.spirit.ConfigActivity

protect.eye.spirit.k.Wqzl

Permissions

Receivers

protect.eye.spirit.service.BootBroadCast

com.cloudyway.adwindow.BootBroadCast

protect.eye.spirit.g.Pmdu

protect.eye.spirit.q.Hc

protect.eye.spirit.k.Rzoz

protect.eye.spirit.f.Lo

Services

Android Permissions

2614b3a925aea689a7c724af63b2e7ba_JaffaCakes118