eb73dee8702ed7e3582e4d6ac3f47e74_JaffaCakes118

Resubmissions

16/12/2024, 22:35

241216-2hyrdssrer10

13/12/2024, 12:13

241213-pd9xmsxrcs10

Sharing

Copy URL Twitter E-mail

General

Target
eb73dee8702ed7e3582e4d6ac3f47e74_JaffaCakes118
Size 2.9MB
Sample241216-2hyrdssrer
SHA256 29e4bdd32b7f308d1a138dcff54c30ac11aa5c178f6e19fe413c7999fdb120a9
MD5 eb73dee8702ed7e3582e4d6ac3f47e74
SHA1 eb2ed2bed4c2a0409d7e17034b408ca676dbb254
SHA512 d24c3ffbc340c86c3f471c510bcadf41dc591199f9166865e685eacd71abea24d7868000cd91d35c3e1e0d0988229014601c3c892f12a6e96cc396acca5ab4fe
SSDEEP 49152:DfxBJaK11uGSEJJ4y6pkcyoyheHwnT+wpLhdpqPCM4Wk7g5FZGNYJ1hbSJHw:kK1A0WkNPrCKLhnFjKkNYJIQ
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS

File Explorer

eb73dee8702ed7e3582e4d6ac3f47e74_JaffaCakes118

.apk 2.9MB

eb73dee8702ed7e3582e4d6ac3f47e74_JaffaCakes118

SHA256 29e4bdd32b7f308d1a138dcff54c30ac11aa5c178f6e19fe413c7999fdb120a9
MD5 eb73dee8702ed7e3582e4d6ac3f47e74
SHA1 eb2ed2bed4c2a0409d7e17034b408ca676dbb254
SHA512 d24c3ffbc340c86c3f471c510bcadf41dc591199f9166865e685eacd71abea24d7868000cd91d35c3e1e0d0988229014601c3c892f12a6e96cc396acca5ab4fe
SSDEEP 49152:DfxBJaK11uGSEJJ4y6pkcyoyheHwnT+wpLhdpqPCM4Wk7g5FZGNYJ1hbSJHw:kK1A0WkNPrCKLhnFjKkNYJIQ
MD5 SHA1 SHA512 SSDEEP

android

flock.trip.upper

alone.squirrel.follow.WTfAxZhBcEcQgHbCfEgEp

alone.squirrel.follow.JNsOmBqElIe

alone.squirrel.follow.HFmSiZmAzNqUwJgPc

alone.squirrel.follow.YReHlGhNiBeUsJmCiZtWiLiPcLkQcAlCtOjWk

alone.squirrel.follow.AXlKbRfKtHeYtDgXj

alone.squirrel.follow.YJiHqCnUaErLwDrLqZwLzOdXuTaLmRyCjUzPrOsXgKz

alone.squirrel.follow.OGwLdRwJgCtIiOuXyGmXxYcWwHqUxLuJj

alone.squirrel.follow.RTpHuHnBhSxHtJiOqYfBcHzUlAkLcOuQgZcYnLo

alone.squirrel.follow.LIgBuFhMgAdFhLrKcArWpZlOtGoHlXgRw

com.google.android.gms.common.api.GoogleApiActivity

alone.squirrel.follow.CLwCrIlFjTc

alone.squirrel.follow.FBdLjOcDpQzXwAuNtIhLnBrMlNj

alone.squirrel.follow.yrbqlbte

alone.squirrel.follow.DZtLiXpZfEfMiLfRbNdYeYg

alone.squirrel.follow.MWoQsMxLzNkHoWm

alone.squirrel.follow.zgemlf

alone.squirrel.follow.LYuUzIqGkUiNkOrUuPn

alone.squirrel.follow.YHbNnXkWkDsGuIfLgSyWcWxXiMj

alone.squirrel.follow.LLaUdKpBbQyQzQoYjZgPuEf

alone.squirrel.follow.IWrClAqCtTpUmCaYqSgYqKyZcSzCfSuQuBePcHcAxRiRbKi

alone.squirrel.follow.zhqtcvsyvlxtkfff

alone.squirrel.follow.HTdEbFmRqYhAbXnGdYnOmKoEfMeTqRaTkRsBhZeOi

alone.squirrel.follow.JQhGzMdFdAfUbHtZoJxQpHyDzJsOiYr

alone.squirrel.follow.ASuFqHnNpDa

alone.squirrel.follow.btv

android.intent.action.SEND android.intent.action.SENDTO

alone.squirrel.follow.RHpPxYeIzTuPuYpLjPtIaMwDsDhXhSiAnHnChQoQz

alone.squirrel.follow.IPkScIsXqLdBgIgWiQtRxPgXwHeAgGjFxPuEoJhLuIz

alone.squirrel.follow.WBaXzTbEmBjXgDkOu

alone.squirrel.follow.YMzYnBdChNmWiOxDwKuUmIgOwUeQyPbAyYzSeAcFdYgNr

alone.squirrel.follow.FNiBlPwJhZw

alone.squirrel.follow.uwptxjy

alone.squirrel.follow.QOmAiBcAsYoJcAgXqBiCnLbUfEjTcZxGcSq

alone.squirrel.follow.RZdJyEoSnKnDeEgTt

alone.squirrel.follow.ZJbAkUpQgWaCqNwPxUjEoZsUkRiErWtWxPdPdKtFdLnKfOsCmFwWkHi

alone.squirrel.follow.OQcEqUmRgKzMuQeZqSlQgFkUkWpFqBbCsTzHpUjTqXrPnXrOzRhAcLg

alone.squirrel.follow.eghwncwfnflol

alone.squirrel.follow.NJwAxUwPeQlHuUhGkTsHuInQdAwPbNnFkUnNaCd

alone.squirrel.follow.LQlUkWzMfCfPdOnXeRuBpUwFuOnNxEjNqEkWpOfTo

alone.squirrel.follow.cvdfws

android.intent.action.MAIN

alone.squirrel.follow.AIsRiZbLdAoIhRkPfAqUcOsBcQmOlElCiYbWaYxXxEbBxZsUpNl

alone.squirrel.follow.PFcXbSdTgBaHaLbDfJhUcObBtQgSqKjRlTfJsDdAfKiCw

alone.squirrel.follow.laavyzwrfvbszxh

alone.squirrel.follow.HLlKaJrOpPwPgEyJzQcEkKd

alone.squirrel.follow.oeivdg

alone.squirrel.follow.OIfAzUcAkMfLcEgTiMiApQpEdYoGfWmUpYtRxSuIuUw

alone.squirrel.follow.ZHkQuHbCrQwDuZjBoDyLyJbXyFlQtIfRf

alone.squirrel.follow.IRrBlLjPwLnTgEiHgEoAgNjNnBbKgGlTbZpJrRxIcRyNtTu

alone.squirrel.follow.KMaQtJlMaDgOqBaFo

alone.squirrel.follow.FMaMsHjPnGiAxOkHxGgJgIcTrPdCpIkGn

alone.squirrel.follow.UZeGyTcYsUkNlEfXlBnSePfByDxOaIfIiPdAcMiMf

alone.squirrel.follow.KAqSwHzYnGmElHdGpIhThTbTtCuSnFeWcScOf

alone.squirrel.follow.JOtFaWxJtSkRlUrPfBsPjGdOrJtQtMlHtOqWiOdAtSjPpUiIl

alone.squirrel.follow.BBhNrFxMaHpBjJmEyOiOdYiEfYyEkZeIeBt

Android Permissions

eb73dee8702ed7e3582e4d6ac3f47e74_JaffaCakes118

Permissions

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECEIVE_SMS

android.permission.USE_FULL_SCREEN_INTENT

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_SMS

android.permission.WAKE_LOCK

android.permission.SEND_SMS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.READ_EXTERNAL_STORAGE

android.permission.CALL_PHONE

android.permission.INTERNET

android.permission.READ_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.REQUEST_DELETE_PACKAGES

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

eb73dee8702ed7e3582e4d6ac3f47e74_JaffaCakes118

alone.squirrel.follow.WTfAxZhBcEcQgHbCfEgEp

alone.squirrel.follow.JNsOmBqElIe

alone.squirrel.follow.HFmSiZmAzNqUwJgPc

alone.squirrel.follow.YReHlGhNiBeUsJmCiZtWiLiPcLkQcAlCtOjWk

alone.squirrel.follow.AXlKbRfKtHeYtDgXj

alone.squirrel.follow.YJiHqCnUaErLwDrLqZwLzOdXuTaLmRyCjUzPrOsXgKz

alone.squirrel.follow.OGwLdRwJgCtIiOuXyGmXxYcWwHqUxLuJj

alone.squirrel.follow.RTpHuHnBhSxHtJiOqYfBcHzUlAkLcOuQgZcYnLo

alone.squirrel.follow.LIgBuFhMgAdFhLrKcArWpZlOtGoHlXgRw

com.google.android.gms.common.api.GoogleApiActivity

alone.squirrel.follow.CLwCrIlFjTc

alone.squirrel.follow.FBdLjOcDpQzXwAuNtIhLnBrMlNj

alone.squirrel.follow.yrbqlbte

alone.squirrel.follow.DZtLiXpZfEfMiLfRbNdYeYg

alone.squirrel.follow.MWoQsMxLzNkHoWm

alone.squirrel.follow.zgemlf

alone.squirrel.follow.LYuUzIqGkUiNkOrUuPn

alone.squirrel.follow.YHbNnXkWkDsGuIfLgSyWcWxXiMj

alone.squirrel.follow.LLaUdKpBbQyQzQoYjZgPuEf

alone.squirrel.follow.IWrClAqCtTpUmCaYqSgYqKyZcSzCfSuQuBePcHcAxRiRbKi

alone.squirrel.follow.zhqtcvsyvlxtkfff

alone.squirrel.follow.HTdEbFmRqYhAbXnGdYnOmKoEfMeTqRaTkRsBhZeOi

alone.squirrel.follow.JQhGzMdFdAfUbHtZoJxQpHyDzJsOiYr

alone.squirrel.follow.ASuFqHnNpDa

alone.squirrel.follow.btv

alone.squirrel.follow.RHpPxYeIzTuPuYpLjPtIaMwDsDhXhSiAnHnChQoQz

alone.squirrel.follow.IPkScIsXqLdBgIgWiQtRxPgXwHeAgGjFxPuEoJhLuIz

alone.squirrel.follow.WBaXzTbEmBjXgDkOu

alone.squirrel.follow.YMzYnBdChNmWiOxDwKuUmIgOwUeQyPbAyYzSeAcFdYgNr

alone.squirrel.follow.FNiBlPwJhZw

alone.squirrel.follow.uwptxjy

alone.squirrel.follow.QOmAiBcAsYoJcAgXqBiCnLbUfEjTcZxGcSq

alone.squirrel.follow.RZdJyEoSnKnDeEgTt

alone.squirrel.follow.ZJbAkUpQgWaCqNwPxUjEoZsUkRiErWtWxPdPdKtFdLnKfOsCmFwWkHi

alone.squirrel.follow.OQcEqUmRgKzMuQeZqSlQgFkUkWpFqBbCsTzHpUjTqXrPnXrOzRhAcLg

alone.squirrel.follow.eghwncwfnflol

alone.squirrel.follow.NJwAxUwPeQlHuUhGkTsHuInQdAwPbNnFkUnNaCd

alone.squirrel.follow.LQlUkWzMfCfPdOnXeRuBpUwFuOnNxEjNqEkWpOfTo

alone.squirrel.follow.cvdfws

alone.squirrel.follow.AIsRiZbLdAoIhRkPfAqUcOsBcQmOlElCiYbWaYxXxEbBxZsUpNl

alone.squirrel.follow.PFcXbSdTgBaHaLbDfJhUcObBtQgSqKjRlTfJsDdAfKiCw

alone.squirrel.follow.laavyzwrfvbszxh

alone.squirrel.follow.HLlKaJrOpPwPgEyJzQcEkKd

alone.squirrel.follow.oeivdg

alone.squirrel.follow.OIfAzUcAkMfLcEgTiMiApQpEdYoGfWmUpYtRxSuIuUw

alone.squirrel.follow.ZHkQuHbCrQwDuZjBoDyLyJbXyFlQtIfRf

alone.squirrel.follow.IRrBlLjPwLnTgEiHgEoAgNjNnBbKgGlTbZpJrRxIcRyNtTu

alone.squirrel.follow.KMaQtJlMaDgOqBaFo

alone.squirrel.follow.FMaMsHjPnGiAxOkHxGgJgIcTrPdCpIkGn

alone.squirrel.follow.UZeGyTcYsUkNlEfXlBnSePfByDxOaIfIiPdAcMiMf

alone.squirrel.follow.KAqSwHzYnGmElHdGpIhThTbTtCuSnFeWcScOf

alone.squirrel.follow.JOtFaWxJtSkRlUrPfBsPjGdOrJtQtMlHtOqWiOdAtSjPpUiIl

alone.squirrel.follow.BBhNrFxMaHpBjJmEyOiOdYiEfYyEkZeIeBt

alone.squirrel.follow.jepd

alone.squirrel.follow.hnkgfrj

alone.squirrel.follow.othtzqb

alone.squirrel.follow.jueuwp

alone.squirrel.follow.cuxfpuptslufyr

alone.squirrel.follow.wjevaq

alone.squirrel.follow.emk

alone.squirrel.follow.huozqgtnqamtn

alone.squirrel.follow.vmbqjnmt

alone.squirrel.follow.kxrlzfcd

alone.squirrel.follow.fkcsdpzkblp

alone.squirrel.follow.fxuu

alone.squirrel.follow.fiveliwedxu

alone.squirrel.follow.fkr

alone.squirrel.follow.jpeaosqwaiu

alone.squirrel.follow.jkohhyyaesubcui

alone.squirrel.follow.bimrqyav

alone.squirrel.follow.fkhdru

Android Permissions

eb73dee8702ed7e3582e4d6ac3f47e74_JaffaCakes118