General

  • Target

    9d7c6db36b65909e13a87e497bd495df_JaffaCakes118

  • Size

    244KB

  • MD5

    9d7c6db36b65909e13a87e497bd495df

  • SHA1

    20e7902b318c92dc39f609b3bb0c0bcc0612eb13

  • SHA256

    a0c6f248f02967a02094f937f82571ffb69de97b76fb663229715966fb675ff4

  • SHA512

    c2e12e256f7a801bc9b4c4ee0814d017b6a9dcf5456bbb25ef91094ace7b80563b61616c88980b0ae3a7dd4d20823dcab2fdb46e15db1733258327f89b77d59b

  • SSDEEP

    6144:5+jNdpp1fKdky1GCFlYc5ecKLjU7upREu3vnR3HiCJAu0CaIIc:5+XzZKdV1Oc5vaj8uYu/9HuVml

Score
10/10

Malware Config

Extracted

Family

sandrorat

C2

anawebs.ddns.net:1234

Signatures

  • Sandrorat family
  • Requests dangerous framework permissions 14 IoCs

Files

  • 9d7c6db36b65909e13a87e497bd495df_JaffaCakes118
    .apk android

    net.droidjack.server

    net.droidjack.server.MainActivity


Android Permissions

9d7c6db36b65909e13a87e497bd495df_JaffaCakes118

Permissions

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.RECORD_AUDIO

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_SMS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.CAMERA

android.permission.WRITE_CONTACTS

android.permission.READ_CONTACTS

android.permission.SEND_SMS

android.permission.READ_CALL_LOG

android.permission.WRITE_CALL_LOG

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.CALL_PHONE

android.permission.GET_TASKS

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.INTERNET