Overview

overview

7

Static

static

6

jaffacakes...24.apk

android-9-x86

7

jaffacakes...24.apk

android-10-x64

7

jaffacakes...24.apk

android-11-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    jaffacakes118_ca24.apk
  • Size 20.5MB
  • Sample260909-1yzsys1fqa
  • SHA256 f4209eeb3d23d117e929ef49c102a12aabcd4a724c0355ad8ad69331d8dbc57e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 2 IoCs
  • Untrusted Codesign Signers 2 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • jaffacakes118_ca24.apk
    .apk 20.5MB
  • payload_clerk.apk
    .apk 16.9MB

jaffacakes118_ca24.apk

  • SHA256 f4209eeb3d23d117e929ef49c102a12aabcd4a724c0355ad8ad69331d8dbc57e
  • MD5 SHA1 SHA512 SSDEEP TLSH
android

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
d79cf56cb66897d13cfe510bc2036fe35e7071c0a17f2dccb92471cdad908571
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=Facebook Corporation,OU=Facebook,O=Facebook Mobile,L=Palo Alto,ST=CA,C=US
com.bless.convince

Android Permissions

jaffacakes118_ca24.apk

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.INTERNET

android.permission.INSTALL_PACKAGES

com.bless.convince.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.POST_NOTIFICATIONS