General

  • Target

    dd60c8f63996d8ed23bcd8c0cdd4ad6b_JaffaCakes118

  • Size

    254KB

  • MD5

    dd60c8f63996d8ed23bcd8c0cdd4ad6b

  • SHA1

    16b74de31df6514e6f1e0143ceeae8731ea3beed

  • SHA256

    f5b654396e690cdef07318b705974c35a155e7a528d48c97e0b1aff0efcc1916

  • SHA512

    eb234200d08ba70176f8cbd7e81322528bd21fd9a7cc89d77235fd862371decde26fbaa27d7e3de9080f643f3f8af2a201f886b3208b49ca4ebd53742fc3b547

  • SSDEEP

    6144:Yy+X4MXJU8eMK+AUR3nZ+cHoBH8MVz6RQjPJS6xv:Zt18sk9nZpIBzgelSQv

Score
10/10

Malware Config

Extracted

Family

sandrorat

C2

djpaddy.chickenkiller.com:31337

Signatures

  • Sandrorat family
  • Requests dangerous framework permissions 14 IoCs

Files

  • dd60c8f63996d8ed23bcd8c0cdd4ad6b_JaffaCakes118
    .apk android

    net.droidjack.server

    net.droidjack.server.MainActivity


Android Permissions

dd60c8f63996d8ed23bcd8c0cdd4ad6b_JaffaCakes118

Permissions

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.RECORD_AUDIO

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_SMS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.CAMERA

android.permission.WRITE_CONTACTS

android.permission.READ_CONTACTS

android.permission.SEND_SMS

android.permission.READ_CALL_LOG

android.permission.WRITE_CALL_LOG

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.CALL_PHONE

android.permission.GET_TASKS

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.INTERNET