e128aa32a49e33052293827a6cb1cfa5_JaffaCakes118

General

Target
e128aa32a49e33052293827a6cb1cfa5_JaffaCakes118
Size 133KB
Sample241211-m45phatrdn
SHA256 51bf7efcc3be6bdd787b7b675a59cc6aaca66ddd043451d17882164c71c91b7b
MD5 e128aa32a49e33052293827a6cb1cfa5
SHA1 424c2a1301c7d96c02e94c07d1b76360948ff666
SHA512 af07ab7b8021abcfe30789511213d88056ce70fdd51fefd8564f9bf3d04bb38615b7c2deaa75041d2773606edc5426a12c2dcd6949edf4083e41f4280977ea08
SSDEEP 3072:MYNP9LiLPSGibrJ25c07juLuIQ2XzXcva2U:MYNVASGi30/ovQ2jsvaz
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS

File Explorer

e128aa32a49e33052293827a6cb1cfa5_JaffaCakes118

.apk 133KB

e128aa32a49e33052293827a6cb1cfa5_JaffaCakes118

SHA256 51bf7efcc3be6bdd787b7b675a59cc6aaca66ddd043451d17882164c71c91b7b
MD5 e128aa32a49e33052293827a6cb1cfa5
SHA1 424c2a1301c7d96c02e94c07d1b76360948ff666
SHA512 af07ab7b8021abcfe30789511213d88056ce70fdd51fefd8564f9bf3d04bb38615b7c2deaa75041d2773606edc5426a12c2dcd6949edf4083e41f4280977ea08
SSDEEP 3072:MYNP9LiLPSGibrJ25c07juLuIQ2XzXcva2U:MYNVASGi30/ovQ2jsvaz
MD5 SHA1 SHA512 SSDEEP

android

com.lwdsz.vlfhtcsvfxxrx

Android Permissions

e128aa32a49e33052293827a6cb1cfa5_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.REQUEST_DELETE_PACKAGES

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_CONTACTS

android.permission.WAKE_LOCK

e128aa32a49e33052293827a6cb1cfa5_JaffaCakes118

com.lwdsz.vlfhtcsvfxxrx.iifrljxocgypns.phfxrupnsitzl

com.google.android.gms.common.api.GoogleApiActivity

com.lwdsz.vlfhtcsvfxxrx.oxagrtcyqigz.mkdgifoasex

com.lwdsz.vlfhtcsvfxxrx.dcgeqpelzzjntnul

com.lwdsz.vlfhtcsvfxxrx.iifrljxocgypns.guyu

com.lwdsz.vlfhtcsvfxxrx.iifrljxocgypns.benhlhqj

com.lwdsz.vlfhtcsvfxxrx.lio

com.lwdsz.vlfhtcsvfxxrx.iifrljxocgypns.qdqslzbvrhh

com.lwdsz.vlfhtcsvfxxrx.iifrljxocgypns.vqjykvyiufbrsj

com.lwdsz.vlfhtcsvfxxrx.hvkmxib.hptdp

com.lwdsz.vlfhtcsvfxxrx.hvkmxib.aeuusazlmor

com.lwdsz.vlfhtcsvfxxrx.vohpjebkknbnv

com.lwdsz.vlfhtcsvfxxrx.hvkmxib.wsmxrwobddwoniif

com.lwdsz.vlfhtcsvfxxrx.hvkmxib.vzrislwn

com.lwdsz.vlfhtcsvfxxrx.hvkmxib.iyecoyojjc

com.lwdsz.vlfhtcsvfxxrx.hvkmxib.pmzasbodlhobsy

com.lwdsz.vlfhtcsvfxxrx.hvkmxib.kkpjzmqhtp

com.lwdsz.vlfhtcsvfxxrx.oxagrtcyqigz.nbljj

com.lwdsz.vlfhtcsvfxxrx.kjifgymzmqzbwu

com.lwdsz.vlfhtcsvfxxrx.jtxeebimrescufh.bcwhbollj

Sharing

General

Malware Config

Signatures

File Explorer

e128aa32a49e33052293827a6cb1cfa5_JaffaCakes118

com.lwdsz.vlfhtcsvfxxrx.iifrljxocgypns.phfxrupnsitzl

com.google.android.gms.common.api.GoogleApiActivity

com.lwdsz.vlfhtcsvfxxrx.oxagrtcyqigz.mkdgifoasex

com.lwdsz.vlfhtcsvfxxrx.dcgeqpelzzjntnul

com.lwdsz.vlfhtcsvfxxrx.iifrljxocgypns.guyu

com.lwdsz.vlfhtcsvfxxrx.iifrljxocgypns.benhlhqj

com.lwdsz.vlfhtcsvfxxrx.lio

com.lwdsz.vlfhtcsvfxxrx.iifrljxocgypns.qdqslzbvrhh

com.lwdsz.vlfhtcsvfxxrx.iifrljxocgypns.vqjykvyiufbrsj

com.lwdsz.vlfhtcsvfxxrx.hvkmxib.hptdp

com.lwdsz.vlfhtcsvfxxrx.hvkmxib.aeuusazlmor

com.lwdsz.vlfhtcsvfxxrx.vohpjebkknbnv

com.lwdsz.vlfhtcsvfxxrx.hvkmxib.wsmxrwobddwoniif

com.lwdsz.vlfhtcsvfxxrx.hvkmxib.vzrislwn

com.lwdsz.vlfhtcsvfxxrx.hvkmxib.iyecoyojjc

com.lwdsz.vlfhtcsvfxxrx.hvkmxib.pmzasbodlhobsy

com.lwdsz.vlfhtcsvfxxrx.hvkmxib.kkpjzmqhtp

com.lwdsz.vlfhtcsvfxxrx.oxagrtcyqigz.nbljj

com.lwdsz.vlfhtcsvfxxrx.kjifgymzmqzbwu

com.lwdsz.vlfhtcsvfxxrx.jtxeebimrescufh.bcwhbollj

Android Permissions

e128aa32a49e33052293827a6cb1cfa5_JaffaCakes118