6089b4994b42a0630b37a2beb445e9ac_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
6089b4994b42a0630b37a2beb445e9ac_JaffaCakes118
Size 1.7MB
Sample241020-fxb1aashrn
SHA256 3cae06ec8a7224cbdea6093d499bda7a1df1de8fec029bc63e82e7559d6c69b2
MD5 6089b4994b42a0630b37a2beb445e9ac
SHA1 03b9df87de2657a97a3d797a9dba88c5e0b2fd47
SHA512 39d544fbde8d849d5cc48798cfab2c422d327ab2126e89a28e900b730b8b818d34118d11412fe93d9b5c0539dc05a69ea00445d621fed1d9e78fe4efa6c95fb5
SSDEEP 49152:3jEnRR3KqlG49pkTjJev8EHW01YCNcRR3Qc:zEnm09pGjMvjW0rNcMc
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS

File Explorer

6089b4994b42a0630b37a2beb445e9ac_JaffaCakes118

.apk 1.7MB
helper.bin

.apk 31KB
plugin.apk

.apk 330KB
helper.bin

.apk 31KB

6089b4994b42a0630b37a2beb445e9ac_JaffaCakes118

SHA256 3cae06ec8a7224cbdea6093d499bda7a1df1de8fec029bc63e82e7559d6c69b2
MD5 6089b4994b42a0630b37a2beb445e9ac
SHA1 03b9df87de2657a97a3d797a9dba88c5e0b2fd47
SHA512 39d544fbde8d849d5cc48798cfab2c422d327ab2126e89a28e900b730b8b818d34118d11412fe93d9b5c0539dc05a69ea00445d621fed1d9e78fe4efa6c95fb5
SSDEEP 49152:3jEnRR3KqlG49pkTjJev8EHW01YCNcRR3Qc:zEnm09pGjMvjW0rNcMc
MD5 SHA1 SHA512 SSDEEP

android

com.nativedroid.xgirl

plugin.apk

SHA256 76556dae89b8ae56ed6b52bee819a8cd5809ce967d4c1c8386f1ba438057a18f
MD5 a2e1d87e7666a64b69bc5d2bd2750628
SHA1 e82331f06cfcdecc3b0e04dfc41062ef2479ed4f
SHA512 40de9a6ed6f3a2a580afa3eeb7ce87750d71b5e4cb92a175180414b58cb00de18c026c1c1c937d73b09b7d5e0fa4e5dfe026bc5b66afd532f35a326f2f362ff6
SSDEEP 6144:r5dN8DhJ876h6i3X+22I81FDamNi3QS9B4u64e0Oep2uOpOjpCpF1CMqQBwClJi:rOr87Ev3P2ImFWM+U4w4VoLCMlBwCy
MD5 SHA1 SHA512 SSDEEP

android

com.xpaper.video

Android Permissions

6089b4994b42a0630b37a2beb445e9ac_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.BATTERY_STATS

android.permission.RECEIVE_USER_PRESENT

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.WRITE_SMS

android.permission.BLUETOOTH

com.google.android.providers.gsf.permission.READ_GSERVICES

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

com.android.launcher2.permission.READ_SETTINGS

com.android.launcher2.permission.WRITE_SETTINGS

com.android.launcher3.permission.READ_SETTINGS

com.android.launcher3.permission.WRITE_SETTINGS

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

com.oppo.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.WRITE_SETTINGS

com.lenovo.launcher.permission.READ_SETTINGS

com.lenovo.launcher.permission.WRITE_SETTINGS

com.lenovo.launcherhdmarket.permission.READ_SETTINGS

com.lenovo.launcherhdmarket.permission.WRITE_SETTINGS

6089b4994b42a0630b37a2beb445e9ac_JaffaCakes118

com.nativedroid.xpaper.MainActivity

com.nativedroid.sa.sdk.ad.AdActivity

com.nativedroid.sa.sdk.iconads.IconAdsActivity

com.loki.sdk.ClientService

com.nativedroid.sa.sdk.core.SCService

com.nativedroid.module.offerprobe.probe.ProbeService

com.nativedroid.sa.sdk.core.SFService

com.nativedroid.sa.sdk.core.SCReceiver

helper.bin

plugin.apk

com.google.system.ss.aa

com.nativedroid.sa.sdk.ad.AdActivity

com.loki.sdk.ClientService

com.nativedroid.sa.sdk.core.ABC

com.nativedroid.sa.sdk.core.SFService

com.google.system.ss.rr

com.nativedroid.sa.sdk.core.BBC

helper.bin