JaffaCakes118_d6fabd6517729b26751e23dfa4c9ec60

General

Target
JaffaCakes118_d6fabd6517729b26751e23dfa4c9ec60
Size 8.4MB
Sample250110-bhny3synfp
SHA256 4e88ad99d9d23fec0a1e3dcb508639c637f44099dbf099fef563b0bdce3db12d
MD5 d6fabd6517729b26751e23dfa4c9ec60
SHA1 5b9025a269bb5131757ca5b6bb80410c0edc68d9
SHA512 8182823c2a27c630f7fe64862abf8a436468250e8fb1d70a75199f11ecd47f60ef3330aba02e74d69b4db1c8606fcb58b9dde9949feb137dd89dfecdd41d080c
SSDEEP 196608:mxoNyHUeAjc1CbFM/usyNYHmEDWx0RiQdyjynFAL91:m/0jjcAbFM/N2YHmwWabyj401
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to send SMS messages.	android.permission.SEND_SMS

File Explorer

JaffaCakes118_d6fabd6517729b26751e23dfa4c9ec60

.apk 8.4MB

JaffaCakes118_d6fabd6517729b26751e23dfa4c9ec60

SHA256 4e88ad99d9d23fec0a1e3dcb508639c637f44099dbf099fef563b0bdce3db12d
MD5 d6fabd6517729b26751e23dfa4c9ec60
SHA1 5b9025a269bb5131757ca5b6bb80410c0edc68d9
SHA512 8182823c2a27c630f7fe64862abf8a436468250e8fb1d70a75199f11ecd47f60ef3330aba02e74d69b4db1c8606fcb58b9dde9949feb137dd89dfecdd41d080c
SSDEEP 196608:mxoNyHUeAjc1CbFM/usyNYHmEDWx0RiQdyjynFAL91:m/0jjcAbFM/N2YHmwWabyj401
MD5 SHA1 SHA512 SSDEEP

android

com.yjfsyghl.pjfksyf

Android Permissions

JaffaCakes118_d6fabd6517729b26751e23dfa4c9ec60

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.CAPTURE_VIDEO_OUTPUT

android.permission.CHANGE_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.DISABLE_KEYGUARD

android.permission.RECEIVE_SMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.READ_CONTACTS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.READ_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.CALL_PHONE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REORDER_TASKS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SMS

android.permission.SEND_SMS

android.permission.INTERNET

JaffaCakes118_d6fabd6517729b26751e23dfa4c9ec60

com.yjfsyghl.pjfksyf.bot.components.screencast.ScreencastStartActivity

com.yjfsyghl.pjfksyf.bot.components.locker.LockerActivity

com.yjfsyghl.pjfksyf.bot.components.screencast.UnlockActivity

com.yjfsyghl.pjfksyf.bot.sms.ComposeSmsActivity

com.yjfsyghl.pjfksyf.core.injects_core.Screen

com.yjfsyghl.pjfksyf.bot.components.locker.LockerActivity$DummyActivity

com.yjfsyghl.pjfksyf.MainActivity

com.yjfsyghl.pjfksyf.bot.PermissionsActivity

com.yjfsyghl.pjfksyf.bot.components.injects.system.InjAccessibilityService

com.yjfsyghl.pjfksyf.core.injects_core.Worker

com.yjfsyghl.pjfksyf.core.PeriodicJobService

com.yjfsyghl.pjfksyf.bot.components.screencast.ScreencastService

com.yjfsyghl.pjfksyf.bot.sms.HeadlessSmsSendService

com.yjfsyghl.pjfksyf.bot.components.socks5.Socks5ProxyService

com.yjfsyghl.pjfksyf.bot.sms.MmsReceiver

com.yjfsyghl.pjfksyf.bot.sms.SmsReceiver

com.yjfsyghl.pjfksyf.core.injects_core.CHandler

com.yjfsyghl.pjfksyf.bot.receivers.MainReceiver

com.yjfsyghl.pjfksyf.core.PeriodicJobReceiver

com.yjfsyghl.pjfksyf.bot.HelperAdmin$MyHomeReceiver

android.support.v4.content.FileProvider

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_d6fabd6517729b26751e23dfa4c9ec60

com.yjfsyghl.pjfksyf.bot.components.screencast.ScreencastStartActivity

com.yjfsyghl.pjfksyf.bot.components.locker.LockerActivity

com.yjfsyghl.pjfksyf.bot.components.screencast.UnlockActivity

com.yjfsyghl.pjfksyf.bot.sms.ComposeSmsActivity

com.yjfsyghl.pjfksyf.core.injects_core.Screen

com.yjfsyghl.pjfksyf.bot.components.locker.LockerActivity$DummyActivity

com.yjfsyghl.pjfksyf.MainActivity

com.yjfsyghl.pjfksyf.bot.PermissionsActivity

com.yjfsyghl.pjfksyf.bot.components.injects.system.InjAccessibilityService

com.yjfsyghl.pjfksyf.core.injects_core.Worker

com.yjfsyghl.pjfksyf.core.PeriodicJobService

com.yjfsyghl.pjfksyf.bot.components.screencast.ScreencastService

com.yjfsyghl.pjfksyf.bot.sms.HeadlessSmsSendService

com.yjfsyghl.pjfksyf.bot.components.socks5.Socks5ProxyService

com.yjfsyghl.pjfksyf.bot.sms.MmsReceiver

com.yjfsyghl.pjfksyf.bot.sms.SmsReceiver

com.yjfsyghl.pjfksyf.core.injects_core.CHandler

com.yjfsyghl.pjfksyf.bot.receivers.MainReceiver

com.yjfsyghl.pjfksyf.core.PeriodicJobReceiver

com.yjfsyghl.pjfksyf.bot.HelperAdmin$MyHomeReceiver

android.support.v4.content.FileProvider

Android Permissions

JaffaCakes118_d6fabd6517729b26751e23dfa4c9ec60