General

  • Target

    b6f2fbdd5df903874ae719224bf759f3_JaffaCakes118

  • Size

    254KB

  • MD5

    b6f2fbdd5df903874ae719224bf759f3

  • SHA1

    cba65e30830ee3f4693180bd74c3d6521e73f8ea

  • SHA256

    b2ddd144adc0b3cc4449e7ab6974f0ebab258b89797b8955ef19ed59d680e235

  • SHA512

    f1a8ae2534d7e96b944402d93baf2f81e0f365558e3e5fcf7f92990283ed82217f7e0bada2fc36dc83fdf6ff6abddfa64e9975ca9c96f0857cba671a71979cfe

  • SSDEEP

    6144:LlySS49NM6mrITccV88vwYF34p0mfFROjfIaTSOvN:LU0I6mrQVDw434JFROjfTRl

Score
10/10

Malware Config

Extracted

Family

sandrorat

C2

216.58.101.242:1336

Signatures

  • Sandrorat family
  • Requests dangerous framework permissions 14 IoCs

Files

  • b6f2fbdd5df903874ae719224bf759f3_JaffaCakes118
    .apk android

    net.droidjack.server

    net.droidjack.server.MainActivity


Android Permissions

b6f2fbdd5df903874ae719224bf759f3_JaffaCakes118

Permissions

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.RECORD_AUDIO

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_SMS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.CAMERA

android.permission.WRITE_CONTACTS

android.permission.READ_CONTACTS

android.permission.SEND_SMS

android.permission.READ_CALL_LOG

android.permission.WRITE_CALL_LOG

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.CALL_PHONE

android.permission.GET_TASKS

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.INTERNET