General

  • Target

    b35dc72b278271b0c003ef8c335c267d_JaffaCakes118

  • Size

    254KB

  • MD5

    b35dc72b278271b0c003ef8c335c267d

  • SHA1

    495b38e10dcf1a5a63f3f4e930c7815d226bd9c8

  • SHA256

    96df7effc5e18bfefb8897a7edc76bfab907b58b15591ba16c29d2bf92e52b9c

  • SHA512

    502c74dd86c0d57d1993c36368182501ab100056c1357ded7dd05e1182ba9d49a90565a82e0b340aec7ea48f799a64bac2c083698c48a6a175e3310b98708e70

  • SSDEEP

    6144:ty+F4lXdj+rfJzrtGXPHjlvwIzwaivPhtMZSHjbeWlA/BNeH:8DJ6pYHjhH+v5t6SHjbZcBMH

Score
10/10

Malware Config

Extracted

Family

sandrorat

C2

connect.yourtube.me:1337

Signatures

  • Sandrorat family
  • Requests dangerous framework permissions 14 IoCs

Files

  • b35dc72b278271b0c003ef8c335c267d_JaffaCakes118
    .apk android

    net.droidjack.server

    net.droidjack.server.MainActivity


Android Permissions

b35dc72b278271b0c003ef8c335c267d_JaffaCakes118

Permissions

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.RECORD_AUDIO

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_SMS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.CAMERA

android.permission.WRITE_CONTACTS

android.permission.READ_CONTACTS

android.permission.SEND_SMS

android.permission.READ_CALL_LOG

android.permission.WRITE_CALL_LOG

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.CALL_PHONE

android.permission.GET_TASKS

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.INTERNET