General

  • Target

    2dd17c94fbdaa4826e2f6194b3e54022_JaffaCakes118

  • Size

    5.1MB

  • MD5

    2dd17c94fbdaa4826e2f6194b3e54022

  • SHA1

    81c850beb565fdbdd79286c045c912556c1f740a

  • SHA256

    786dcf1b4f50d4a0ff25933c84466ff39f54595993dd36beaecd2edf09527a74

  • SHA512

    a8dcd81dbd4e7d7cd1182ee68292a117fa7bd8cbe0376eba6eba66288ef9973f6eaab932ab36c6ccd526ad4573e0761f5a20fec00ad753d0df648a6fd8874c8a

  • SSDEEP

    98304:9S2EbF7lCGhzbqKQC6lKjaxOMaROUz67pjWbAdo7ycF45B21Ujdmq4m4Phodes:9S28l9vq9C6lmQOMab60b6o7aqEt4Pi1

Score
6/10

Malware Config

Signatures

  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 5 IoCs

Files

  • 2dd17c94fbdaa4826e2f6194b3e54022_JaffaCakes118
    .apk android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

    skydownloaderv7.bbm.stt31.ua83247992v9

    com.vnfa.facebook.MainActivity


  • com.mobile.indiapp.tmp
    .apk android arch:arm

    com.mobile.indiapp

    com.mobile.indiapp.activity.WelcomePageActivity


Android Permissions

2dd17c94fbdaa4826e2f6194b3e54022_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.SYSTEM_ALERT_WINDOW

com.android.launcher.permission.INSTALL_SHORTCUT

com.google.android.c2dm.permission.RECEIVE

android.permission.READ_PHONE_STATE

android.permission.PROCESS_OUTGOING_CALLS

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.READ_EXTERNAL_STORAGE