91964426f769c467e1d5a58875cb4ba9_JaffaCakes118

General

Target
91964426f769c467e1d5a58875cb4ba9_JaffaCakes118
Size 119KB
Sample241124-azlplsvmfx
SHA256 a2f87e81afb6b58993df52a68c73f13121c093e11c5be97d4c404080bf5a4def
MD5 91964426f769c467e1d5a58875cb4ba9
SHA1 6a22b54c090847c0ba5713cf0b1d6e4b79f8d77d
SHA512 aaba70befd7e8be50c8cbaeaa3f1d61284fd37c08689eeb0ce100eb45cb6d69ae72e9a1934a94cc9209a46995ea95737a3a2aba951a2f5375c0ced41b057f40c
SSDEEP 3072:Vjn16Q9qqLN4g0cH6n9xxAhsghsH010D0s:x1h9qs4txn9xxArq010D0s
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS

File Explorer

91964426f769c467e1d5a58875cb4ba9_JaffaCakes118

.apk 119KB

91964426f769c467e1d5a58875cb4ba9_JaffaCakes118

SHA256 a2f87e81afb6b58993df52a68c73f13121c093e11c5be97d4c404080bf5a4def
MD5 91964426f769c467e1d5a58875cb4ba9
SHA1 6a22b54c090847c0ba5713cf0b1d6e4b79f8d77d
SHA512 aaba70befd7e8be50c8cbaeaa3f1d61284fd37c08689eeb0ce100eb45cb6d69ae72e9a1934a94cc9209a46995ea95737a3a2aba951a2f5375c0ced41b057f40c
SSDEEP 3072:Vjn16Q9qqLN4g0cH6n9xxAhsghsH010D0s:x1h9qs4txn9xxArq010D0s
MD5 SHA1 SHA512 SSDEEP

android

com.oezwgpryah.nyzsdkkgctveu

Android Permissions

91964426f769c467e1d5a58875cb4ba9_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.REQUEST_DELETE_PACKAGES

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_CONTACTS

android.permission.WAKE_LOCK

91964426f769c467e1d5a58875cb4ba9_JaffaCakes118

com.oezwgpryah.nyzsdkkgctveu.qpcymvrvpedydhbg.rzuueoykthcitqs

com.google.android.gms.common.api.GoogleApiActivity

com.oezwgpryah.nyzsdkkgctveu.mvae.emwloqvnfr

com.oezwgpryah.nyzsdkkgctveu.skhwuegnrz

com.oezwgpryah.nyzsdkkgctveu.qpcymvrvpedydhbg.wsb

com.oezwgpryah.nyzsdkkgctveu.qpcymvrvpedydhbg.mlwomqio

com.oezwgpryah.nyzsdkkgctveu.kvdeskgy

com.oezwgpryah.nyzsdkkgctveu.qpcymvrvpedydhbg.mdbvai

com.oezwgpryah.nyzsdkkgctveu.qpcymvrvpedydhbg.kcj

com.oezwgpryah.nyzsdkkgctveu.ekskgrnbt.zysuj

com.oezwgpryah.nyzsdkkgctveu.ekskgrnbt.grloxwekhzuoespo

com.oezwgpryah.nyzsdkkgctveu.eancnaybzis

com.oezwgpryah.nyzsdkkgctveu.ekskgrnbt.ixsdapfkelwewcv

com.oezwgpryah.nyzsdkkgctveu.ekskgrnbt.exbbguoc

com.oezwgpryah.nyzsdkkgctveu.ekskgrnbt.zxbwqxhyhsnej

com.oezwgpryah.nyzsdkkgctveu.ekskgrnbt.npjjffy

com.oezwgpryah.nyzsdkkgctveu.ekskgrnbt.xcxppsmmh

com.oezwgpryah.nyzsdkkgctveu.mvae.zustbhmiqae

com.oezwgpryah.nyzsdkkgctveu.vczztyhqgma

com.oezwgpryah.nyzsdkkgctveu.sccevvsujbfnwdk.cinnhbhgsq

Sharing

General

Malware Config

Signatures

File Explorer

91964426f769c467e1d5a58875cb4ba9_JaffaCakes118

com.oezwgpryah.nyzsdkkgctveu.qpcymvrvpedydhbg.rzuueoykthcitqs

com.google.android.gms.common.api.GoogleApiActivity

com.oezwgpryah.nyzsdkkgctveu.mvae.emwloqvnfr

com.oezwgpryah.nyzsdkkgctveu.skhwuegnrz

com.oezwgpryah.nyzsdkkgctveu.qpcymvrvpedydhbg.wsb

com.oezwgpryah.nyzsdkkgctveu.qpcymvrvpedydhbg.mlwomqio

com.oezwgpryah.nyzsdkkgctveu.kvdeskgy

com.oezwgpryah.nyzsdkkgctveu.qpcymvrvpedydhbg.mdbvai

com.oezwgpryah.nyzsdkkgctveu.qpcymvrvpedydhbg.kcj

com.oezwgpryah.nyzsdkkgctveu.ekskgrnbt.zysuj

com.oezwgpryah.nyzsdkkgctveu.ekskgrnbt.grloxwekhzuoespo

com.oezwgpryah.nyzsdkkgctveu.eancnaybzis

com.oezwgpryah.nyzsdkkgctveu.ekskgrnbt.ixsdapfkelwewcv

com.oezwgpryah.nyzsdkkgctveu.ekskgrnbt.exbbguoc

com.oezwgpryah.nyzsdkkgctveu.ekskgrnbt.zxbwqxhyhsnej

com.oezwgpryah.nyzsdkkgctveu.ekskgrnbt.npjjffy

com.oezwgpryah.nyzsdkkgctveu.ekskgrnbt.xcxppsmmh

com.oezwgpryah.nyzsdkkgctveu.mvae.zustbhmiqae

com.oezwgpryah.nyzsdkkgctveu.vczztyhqgma

com.oezwgpryah.nyzsdkkgctveu.sccevvsujbfnwdk.cinnhbhgsq

Android Permissions

91964426f769c467e1d5a58875cb4ba9_JaffaCakes118