40aefc4b3fb5484203ebfe076711aba8_JaffaCakes118

General

Target

40aefc4b3fb5484203ebfe076711aba8_JaffaCakes118
Size

5.6MB
MD5

40aefc4b3fb5484203ebfe076711aba8
SHA1

52e76958dc8719a1ec5d17d6a3f13318502be4e7
SHA256

eee549cc59d9b27d590eab5f18c00f658b3eea49104fd29f5b998d4f4936d1ac
SHA512

78ddf3d8658d099d70c4ad96afc8a7f8f1bedb85ffd389e3cab89a3b7052566b9516359211ac2f994abe28e78faa5c278826b30c85fe9d8ff574f05ac1fb5ff0
SSDEEP

98304:fuClsrnWqP6lbHa/ca164pDvjNby70Y8reErPM8dLBPHFhOfbqOMRhoBiDzfys:fuClE6SUkDvOj8SE+BsoBiDzfys

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

Files

40aefc4b3fb5484203ebfe076711aba8_JaffaCakes118
.apk android

com.RMRaceStart.demodoodle

com.demodoodle.activity.WelcomeActivity

Activities

com.demodoodle.activity.WelcomeActivity

android.intent.action.MAIN

Permissions

android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.VIBRATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.GET_TASKS
android.permission.INTERNET
android.permission.WAKE_LOCK
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
android.permission.GET_TASKS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.CAMERA
android.permission.INTERNET
android.permission.WAKE_LOCK
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_SETTINGS

Receivers

org.RM.J.YooJaeSukS.YooJaeSukReceiver

android.intent.action.USER_PRESENT
com.lseiei.downloadManager
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.net.conn.CONNECTIVITY_CHANGE

org.RM.I.SongJiHyoS.SongJiHyoReceiver

android.intent.action.PACKAGE_ADDED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

org.RM.H.KimJongKookP.KimJongKookReceiver

android.intent.action.PACKAGE_ADDED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

neo.proxy.DistributeReceiver

android.intent.action.ACTION_POWER_CONNECTED
com.secneo.plugin.action.HOURLY
com.secneo.plugin.action.DAILY
com.secneo.plugin.action.APP_STARTED
android.net.conn.CONNECTIVITY_CHANGE
com.secneo.proxy.action.CUSTOM

Services

Android Permissions

40aefc4b3fb5484203ebfe076711aba8_JaffaCakes118

Permissions

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.VIBRATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CAMERA

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_SETTINGS

Sharing

General

Malware Config

Signatures

Files

com.RMRaceStart.demodoodle

com.demodoodle.activity.WelcomeActivity

Activities

com.demodoodle.activity.WelcomeActivity

Permissions

Receivers

org.RM.J.YooJaeSukS.YooJaeSukReceiver

org.RM.I.SongJiHyoS.SongJiHyoReceiver

org.RM.H.KimJongKookP.KimJongKookReceiver

neo.proxy.DistributeReceiver

Services

Android Permissions

40aefc4b3fb5484203ebfe076711aba8_JaffaCakes118