59d14ddf677045e7ce1388fca3bf6b4e_JaffaCakes118
- SHA256 9cc019f2dbf820e49cebdf19731104f8eb1904c18f15ac7e20ea1042f2b21851
-
BadMirror payload
Behavioral task
behavioral1
Sample
59d14ddf677045e7ce1388fca3bf6b4e_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
| resource | yara_rule |
|---|---|
| sample | family_badmirror |
| description | ioc |
|---|---|
| Allows an application to read SMS messages. | android.permission.READ_SMS |
| Allows an application to send SMS messages. | android.permission.SEND_SMS |
| Allows an application to receive SMS messages. | android.permission.RECEIVE_SMS |
| Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. | android.permission.READ_PHONE_STATE |
| Allows an application to write to external storage. | android.permission.WRITE_EXTERNAL_STORAGE |
| Allows an application to read or write the system settings. | android.permission.WRITE_SETTINGS |
| Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. | android.permission.SYSTEM_ALERT_WINDOW |
| Allows an app to access approximate location. | android.permission.ACCESS_COARSE_LOCATION |
BadMirror payload
android.permission.INTERNET
android.permission.READ_SMS
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.READ_PHONE_STATE
android.permission.BROADCAST_SMS
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.WRITE_SETTINGS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.ACCESS_COARSE_LOCATION
android.permission.GET_TASKS
android.permission.WRITE_SMS
android.permission.WRITE_APN_SETTINGS