5b98ba2647238f75efa0c086a1f039d6_JaffaCakes118

General

Target
5b98ba2647238f75efa0c086a1f039d6_JaffaCakes118
Size 5.7MB
Sample241019-jp2gravemc
SHA256 41b183ad167863951ef4e5d9aca4ee27f6c01a325f680978f2876fb71d638322
MD5 5b98ba2647238f75efa0c086a1f039d6
SHA1 8aafd9d25cfc92a73080206cd2d3c716316b1ed7
SHA512 938a0081e80b3a6bd741f5ebc0a6d5ab574311658f63704a9fa3f151780a303d833a446a15dcf99d7ee63ee476ee8655d771f0c10d60afec4af134d8eb9856a6
SSDEEP 98304:O8xiP86LWXoPru6It0zSz9FB+HdhxiP8zxiP8uLWXoAru6ItqzSz9Ff+H5xiP8WM:3Q8AWXoPru6Itesf+tQ8tQ8EWXoAru69
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 14 IoCs

description	ioc
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

File Explorer

5b98ba2647238f75efa0c086a1f039d6_JaffaCakes118

.apk 5.7MB

5b98ba2647238f75efa0c086a1f039d6_JaffaCakes118

SHA256 41b183ad167863951ef4e5d9aca4ee27f6c01a325f680978f2876fb71d638322
MD5 5b98ba2647238f75efa0c086a1f039d6
SHA1 8aafd9d25cfc92a73080206cd2d3c716316b1ed7
SHA512 938a0081e80b3a6bd741f5ebc0a6d5ab574311658f63704a9fa3f151780a303d833a446a15dcf99d7ee63ee476ee8655d771f0c10d60afec4af134d8eb9856a6
SSDEEP 98304:O8xiP86LWXoPru6It0zSz9FB+HdhxiP8zxiP8uLWXoAru6ItqzSz9Ff+H5xiP8WM:3Q8AWXoPru6Itesf+tQ8tQ8EWXoAru69
MD5 SHA1 SHA512 SSDEEP

android

kr.ksunh.XrayMagicFreeCRLC

Android Permissions

5b98ba2647238f75efa0c086a1f039d6_JaffaCakes118

Permissions

android.permission.CALL_PHONE

android.permission.INTERNET

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CALL_PHONE

android.permission.INTERNET

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.CAMERA

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CALL_PHONE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.RECORD_AUDIO

android.permission.WRITE_EXTERNAL_STORAGE

5b98ba2647238f75efa0c086a1f039d6_JaffaCakes118

kr.lighthouse.XrayMagicFreeCCRR.XrayMagicFreeCCRR

kr.lighthouse.XrayMagicFreeCCRR.InputNumber

kr.lighthouse.XrayMagicFreeCCRR.About

kr.lighthouse.XrayMagicFreeCCRR.Result

net.daum.adam.publisher.impl.AdInterstitialActivity

Sharing

General

Malware Config

Signatures

File Explorer

5b98ba2647238f75efa0c086a1f039d6_JaffaCakes118

kr.lighthouse.XrayMagicFreeCCRR.XrayMagicFreeCCRR

kr.lighthouse.XrayMagicFreeCCRR.InputNumber

kr.lighthouse.XrayMagicFreeCCRR.About

kr.lighthouse.XrayMagicFreeCCRR.Result

net.daum.adam.publisher.impl.AdInterstitialActivity

Android Permissions

5b98ba2647238f75efa0c086a1f039d6_JaffaCakes118