5efc76afc97613e3587a9708aefc3ca3_JaffaCakes118

General

Target
5efc76afc97613e3587a9708aefc3ca3_JaffaCakes118
Size 970KB
Sample241019-2ecdzsvdql
SHA256 05166cdb66fd023ee543beffb964814180100f2bd8199d44ae38653c4d1d9709
MD5 5efc76afc97613e3587a9708aefc3ca3
SHA1 94dae159dbc24ff0eeea5432b00efbf768bf066b
SHA512 9810f52085b312537dd2aeac45de9da87a1a0e1d8da880a5c62499c1a251ee3418baa61c08e1a55256f1f5249e6d4925198dc3d897ee2a9a3b38d01a432f09d9
SSDEEP 24576:I7x97z8qaF47Gtm80JCIuCSvCXLPtAljDevw:I7wrMGZ0JCIuXKJAlXeY
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 14 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

File Explorer

5efc76afc97613e3587a9708aefc3ca3_JaffaCakes118

.apk 970KB

5efc76afc97613e3587a9708aefc3ca3_JaffaCakes118

SHA256 05166cdb66fd023ee543beffb964814180100f2bd8199d44ae38653c4d1d9709
MD5 5efc76afc97613e3587a9708aefc3ca3
SHA1 94dae159dbc24ff0eeea5432b00efbf768bf066b
SHA512 9810f52085b312537dd2aeac45de9da87a1a0e1d8da880a5c62499c1a251ee3418baa61c08e1a55256f1f5249e6d4925198dc3d897ee2a9a3b38d01a432f09d9
SSDEEP 24576:I7x97z8qaF47Gtm80JCIuCSvCXLPtAljDevw:I7wrMGZ0JCIuXKJAlXeY
MD5 SHA1 SHA512 SSDEEP

android

gzjxf.lyaefx.svlnu

Android Permissions

5efc76afc97613e3587a9708aefc3ca3_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.CHANGE_CONFIGURATION

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.VIBRATE

android.permission.WRITE_SECURE_SETTINGS

android.permission.WRITE_APN_SETTINGS

android.permission.WRITE_OWNER_DATA

android.permission.RECORD_AUDIO

android.permission.CHANGE_WIFI_STATE

android.permission.CAMERA

android.permission.RECORD_VIDEO

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

android.permission.WRITE_SETTINGS

android.permission.WAKE_LOCK

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

5efc76afc97613e3587a9708aefc3ca3_JaffaCakes118

gzjxf.lyaefx.svlnu.WelcomeActivity

gzjxf.lyaefx.svlnu.ca.MainActivity

gzjxf.lyaefx.svlnu.ca.PlayActivity

gzjxf.lyaefx.svlnu.ca.AboutUsActivity

gzjxf.lyaefx.svlnu.ca.VideoActivity

gzjxf.lyaefx.svlnu.ca.XYActivity

gzjxf.lyaefx.svlnu.ca.UserActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

com.switfpass.pay.activity.QQWapPayWebView

com.mj.jar.pay.SmsServices

com.mj.jar.pay.InSmsReceiver

Sharing

General

Malware Config

Signatures

File Explorer

5efc76afc97613e3587a9708aefc3ca3_JaffaCakes118

gzjxf.lyaefx.svlnu.WelcomeActivity

gzjxf.lyaefx.svlnu.ca.MainActivity

gzjxf.lyaefx.svlnu.ca.PlayActivity

gzjxf.lyaefx.svlnu.ca.AboutUsActivity

gzjxf.lyaefx.svlnu.ca.VideoActivity

gzjxf.lyaefx.svlnu.ca.XYActivity

gzjxf.lyaefx.svlnu.ca.UserActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

com.switfpass.pay.activity.QQWapPayWebView

com.mj.jar.pay.SmsServices

com.mj.jar.pay.InSmsReceiver

Android Permissions

5efc76afc97613e3587a9708aefc3ca3_JaffaCakes118