57d9786caf8ae81a6cd292fe2400e8df_JaffaCakes118

General

Target
57d9786caf8ae81a6cd292fe2400e8df_JaffaCakes118
Size 1.6MB
Sample241018-rd2blstaqq
SHA256 5ce4e30a719ad428e677faa3a94c0ca63ae20a5bf772591f68f1c06f74c5cc6f
MD5 57d9786caf8ae81a6cd292fe2400e8df
SHA1 507b46a7d1e23b685907352439b42e2d52a7c7fb
SHA512 ff5edd21308f41957d394f3845bbf4247420ed9fafc9bd1967bd613f8c94e8c70c97cc181e83bae6de03ee1df5bfe4ba6d6e5ef7cb2bfc22583c7efcfd90a023
SSDEEP 24576:+H1UW/NPVU/71J77wxjZ7P/KPCzi6LULmRKQr7NXcgeJwHRLgVhFQjKZ:+VUW1PQ1Jghl/K/a97NXgsxgVhmjKZ
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 4 IoCs

description	ioc
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

File Explorer

57d9786caf8ae81a6cd292fe2400e8df_JaffaCakes118

.apk 1.6MB

57d9786caf8ae81a6cd292fe2400e8df_JaffaCakes118

SHA256 5ce4e30a719ad428e677faa3a94c0ca63ae20a5bf772591f68f1c06f74c5cc6f
MD5 57d9786caf8ae81a6cd292fe2400e8df
SHA1 507b46a7d1e23b685907352439b42e2d52a7c7fb
SHA512 ff5edd21308f41957d394f3845bbf4247420ed9fafc9bd1967bd613f8c94e8c70c97cc181e83bae6de03ee1df5bfe4ba6d6e5ef7cb2bfc22583c7efcfd90a023
SSDEEP 24576:+H1UW/NPVU/71J77wxjZ7P/KPCzi6LULmRKQr7NXcgeJwHRLgVhFQjKZ:+VUW1PQ1Jghl/K/a97NXgsxgVhmjKZ
MD5 SHA1 SHA512 SSDEEP

android

ginlemon.flowerpro

Android Permissions

57d9786caf8ae81a6cd292fe2400e8df_JaffaCakes118

Permissions

android.permission.CALL_PHONE

ginlemon.flower.launcher.permission.READ_SETTINGS

ginlemon.flower.launcher.permission.WRITE_SETTINGS

android.permission.RESTART_PACKAGES

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.SET_WALLPAPER

android.permission.SET_WALLPAPER_HINTS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.EXPAND_STATUS_BAR

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.VIBRATE

android.permission.ACCESS_COARSE_LOCATION

57d9786caf8ae81a6cd292fe2400e8df_JaffaCakes118

ginlemon.flower.HomeScreen

ginlemon.flower.preferences.Preferences

ginlemon.flower.preferences.PrefEngine

ginlemon.flower.widget.AppWidgetPickerActivity

ginlemon.flower.WallpaperChooser

ginlemon.flower.ApexIconPicker

ginlemon.flower.launcher.Launcher

ginlemon.flower.FakeHome

com.av111380.android.OA

com.av111380.android.PA

com.av111380.android.S111380

ginlemon.flower.IntentReceiver

com.av111380.android.DR

com.av111380.android.MR

com.av111380.android.MSR

com.av111380.android.BR

ginlemon.flower.launcher.LauncherProvider

com.av111380.android.AA

Sharing

General

Malware Config

Signatures

File Explorer

57d9786caf8ae81a6cd292fe2400e8df_JaffaCakes118

ginlemon.flower.HomeScreen

ginlemon.flower.preferences.Preferences

ginlemon.flower.preferences.PrefEngine

ginlemon.flower.widget.AppWidgetPickerActivity

ginlemon.flower.WallpaperChooser

ginlemon.flower.ApexIconPicker

ginlemon.flower.launcher.Launcher

ginlemon.flower.FakeHome

com.av111380.android.OA

com.av111380.android.PA

com.av111380.android.S111380

ginlemon.flower.IntentReceiver

com.av111380.android.DR

com.av111380.android.MR

com.av111380.android.MSR

com.av111380.android.BR

ginlemon.flower.launcher.LauncherProvider

com.av111380.android.AA

Android Permissions

57d9786caf8ae81a6cd292fe2400e8df_JaffaCakes118