General

  • Target

    464fca737d4720d06235c5788c7a284f_JaffaCakes118

  • Size

    2.5MB

  • MD5

    464fca737d4720d06235c5788c7a284f

  • SHA1

    21fc49a869f45e23dd1af423bed2a4954d8cd66b

  • SHA256

    77e244d2477a05a5349e0b76a8420d1a3351ddb86a4b2ca432ab624691826dbd

  • SHA512

    a339972078237bd87a2f5cae866636715e870cae285f8a7cb9bc7e8ff6ce136d0342dbda7e7562868f37bec5a29dd6b386f2f355d4f066cbb856cbf8b0a93013

  • SSDEEP

    49152:RSVavv6LLiK9IqxHPkPF8vRQG/CIK96iknwQ6zYXzfGm/5pZLkpsdKqdDk7K6JDr:RwfiKCbF8vRlCJ9nkwQ6zYXz+mRbhUqy

Score
10/10

Malware Config

Signatures

  • BadMirror payload 1 IoCs
  • Badmirror family
  • Requests dangerous framework permissions 8 IoCs

Files

  • 464fca737d4720d06235c5788c7a284f_JaffaCakes118
    .apk android arch:arm

    com.grantfozz.sweetylink.zx

    .sweetylink


Android Permissions

464fca737d4720d06235c5788c7a284f_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.BROADCAST_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_COARSE_LOCATION

android.permission.GET_TASKS

android.permission.WRITE_APN_SETTINGS

android.permission.WRITE_SMS