JaffaCakes118_238ca22d5900a4d7493b38a509343e48

General

Target
JaffaCakes118_238ca22d5900a4d7493b38a509343e48
Size 4.2MB
Sample250720-yca7cstrx4
SHA256 20c320a93226dc886b24f98d72950da646e63914308f701412ce1dc684559c56
MD5 238ca22d5900a4d7493b38a509343e48
SHA1 ed3bb001acd0b05dc9ee63395ab9b6b384f555c4
SHA512 caeee8b2ada37a1994073e26ceab817b3d0e9b06959fb78df666e269205443d00b65da5aa1a3a8154d9dc114d06fdecb51eed30da961445fee5a31244bd61bce
SSDEEP 98304:6AvMIUrZR6QA0Du5Y7trteGl9aDML97H2siNvrnx2/FT1Sfnu8Nx:66MIhQWa7F8GXaDC7/crx29T4PuO
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

File Explorer

JaffaCakes118_238ca22d5900a4d7493b38a509343e48

.apk 4.2MB

JaffaCakes118_238ca22d5900a4d7493b38a509343e48

SHA256 20c320a93226dc886b24f98d72950da646e63914308f701412ce1dc684559c56
MD5 238ca22d5900a4d7493b38a509343e48
SHA1 ed3bb001acd0b05dc9ee63395ab9b6b384f555c4
SHA512 caeee8b2ada37a1994073e26ceab817b3d0e9b06959fb78df666e269205443d00b65da5aa1a3a8154d9dc114d06fdecb51eed30da961445fee5a31244bd61bce
SSDEEP 98304:6AvMIUrZR6QA0Du5Y7trteGl9aDML97H2siNvrnx2/FT1Sfnu8Nx:66MIhQWa7F8GXaDC7/crx29T4PuO
MD5 SHA1 SHA512 SSDEEP

android

absurd.doctor.extra

style.love.change.BWnKmXiYrUxZxQkJrTtOwBuFmDoFxWuDxCeUjZqGgPqYuBlGcMbZfYu

style.love.change.KNpRgPqCjLbXdQgKqBsKzHhGaWuLeBsUoIeQwLaXnXyIj

style.love.change.IOuWpOpFzTmYqRuDsHiAoAqLsQfOuWsJiKoSnMxCe

style.love.change.util.AIwnaona

style.love.change.TNqNfYsFhOwNzNlZtNyHnQuCoZjRoHuFj

style.love.change.iawbDIOWABd

style.love.change.JGsGeTdSjCjUjEwCsZkJkAaSjFyQeQfMuZbKsQf

style.love.change.util.iowuadbnIOAWDNa

style.love.change.NRpBkSyBdBuTtJnUy

style.love.change.util.oiaNDiowanDIOAD

style.love.change.NEuDzScMkQlNfWfHnPeNaWePoPqDoNuZlQuKeUlGyIjWx

style.love.change.LZdQeOnGoGbJiCjSsNhCcStWaQfKuCcCwHiOdJp

style.love.change.DAdZeQrZjPmIyAkPf

style.love.change.LGcLtZbEcFlYzNcKgTuBaMgDmJzQzHjQu

style.love.change.ioaWNDIoaD

android.intent.action.MAIN

style.love.change.UUrPrEzOxOlLxUfXiJdYzCcRf

style.love.change.inject.AIOioaIOWDBoawd

style.love.change.FNnPzQyElQaIkCpFcUbFeEdYqZs

style.love.change.ioNWOADnaoidWNaod

style.love.change.XPlCnGzTtHdScDyLjZqSbUuKxKhNcDxBrUnLzBlFyHfWf

style.love.change.GAfAxOmZlObPrHaWzXhJxDrHiThNuWsTiIfWkYr

style.love.change.util.InioawndOIADNwaiond

style.love.change.AWhWzMtTh

style.love.change.FTqWcXrAxBmAsByLuEiMfHyMeCaUnNbTuZxEeMwXzEzKpQdPk

style.love.change.opnoPAWNDioaNDW

android.intent.action.SEND android.intent.action.SENDTO

style.love.change.TMxJfCdXyBuXjOkQeTjQgHqEzFzUwIeGhWhFwLeJgArSbNeEfFlKkKd

style.love.change.DOgRhHyTcQzHnAtUi

style.love.change.XJbXdOlYaOnEeFiQdLdHqNuPaFu

style.love.change.LTrIrDpLgHoWkTyChPdBgYp

style.love.change.ILaQtSwCfPoZaEtXcJqSpNjKqEy

style.love.change.MIcKfWuYcFqHxUeQqTnYdTd

style.love.change.PAuLmGwYqZjGoIeNeOgJjNq

com.google.android.gms.common.api.GoogleApiActivity

style.love.change.KOpRuEaWuGxOaMlIlFiGrAcSl

style.love.change.QAgPiPmOdRiFoLlRjRnNgDdNuFfIkXjOz

Android Permissions

JaffaCakes118_238ca22d5900a4d7493b38a509343e48

Permissions

android.permission.RECEIVE_MMS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.READ_PHONE_STATE

android.permission.FOREGROUND_SERVICE

android.permission.USE_FULL_SCREEN_INTENT

android.permission.WAKE_LOCK

android.permission.WRITE_SMS

android.permission.QUERY_ALL_PACKAGES

android.permission.SEND_SMS

android.permission.REQUEST_PASSWORD_COMPLEXITY

android.permission.READ_SMS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.RECEIVE_SMS

android.permission.INTERNET

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SYSTEM_ALERT_WINDOW

android.permission.USE_BIOMETRIC

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_238ca22d5900a4d7493b38a509343e48

style.love.change.BWnKmXiYrUxZxQkJrTtOwBuFmDoFxWuDxCeUjZqGgPqYuBlGcMbZfYu

style.love.change.KNpRgPqCjLbXdQgKqBsKzHhGaWuLeBsUoIeQwLaXnXyIj

style.love.change.IOuWpOpFzTmYqRuDsHiAoAqLsQfOuWsJiKoSnMxCe

style.love.change.util.AIwnaona

style.love.change.TNqNfYsFhOwNzNlZtNyHnQuCoZjRoHuFj

style.love.change.iawbDIOWABd

style.love.change.JGsGeTdSjCjUjEwCsZkJkAaSjFyQeQfMuZbKsQf

style.love.change.util.iowuadbnIOAWDNa

style.love.change.NRpBkSyBdBuTtJnUy

style.love.change.util.oiaNDiowanDIOAD

style.love.change.NEuDzScMkQlNfWfHnPeNaWePoPqDoNuZlQuKeUlGyIjWx

style.love.change.LZdQeOnGoGbJiCjSsNhCcStWaQfKuCcCwHiOdJp

style.love.change.DAdZeQrZjPmIyAkPf

style.love.change.LGcLtZbEcFlYzNcKgTuBaMgDmJzQzHjQu

style.love.change.ioaWNDIoaD

style.love.change.UUrPrEzOxOlLxUfXiJdYzCcRf

style.love.change.inject.AIOioaIOWDBoawd

style.love.change.FNnPzQyElQaIkCpFcUbFeEdYqZs

style.love.change.ioNWOADnaoidWNaod

style.love.change.XPlCnGzTtHdScDyLjZqSbUuKxKhNcDxBrUnLzBlFyHfWf

style.love.change.GAfAxOmZlObPrHaWzXhJxDrHiThNuWsTiIfWkYr

style.love.change.util.InioawndOIADNwaiond

style.love.change.AWhWzMtTh

style.love.change.FTqWcXrAxBmAsByLuEiMfHyMeCaUnNbTuZxEeMwXzEzKpQdPk

style.love.change.opnoPAWNDioaNDW

style.love.change.TMxJfCdXyBuXjOkQeTjQgHqEzFzUwIeGhWhFwLeJgArSbNeEfFlKkKd

style.love.change.DOgRhHyTcQzHnAtUi

style.love.change.XJbXdOlYaOnEeFiQdLdHqNuPaFu

style.love.change.LTrIrDpLgHoWkTyChPdBgYp

style.love.change.ILaQtSwCfPoZaEtXcJqSpNjKqEy

style.love.change.MIcKfWuYcFqHxUeQqTnYdTd

style.love.change.PAuLmGwYqZjGoIeNeOgJjNq

com.google.android.gms.common.api.GoogleApiActivity

style.love.change.KOpRuEaWuGxOaMlIlFiGrAcSl

style.love.change.QAgPiPmOdRiFoLlRjRnNgDdNuFfIkXjOz

style.love.change.iabWDIObaadAW

style.love.change.Poa5202Anaoid9ah5203ak

style.love.change.ioABoidawOanwDopaWND

style.love.change.receiver.PPpaoJAOWPDjaw

style.love.change.receiver.AAOPnwoapdNOAWD

style.love.change.Poa5217Anaoid9ah5218ak

Android Permissions

JaffaCakes118_238ca22d5900a4d7493b38a509343e48