jaffacakes118_9c9fc61c077583f32087355130e5acf702c474f7833c136a00e79a6ce8b804ca[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_9c9fc61c077583f32087355130e5acf702c474f7833c136a00e79a6ce8b804ca.bin
Size 33.7MB
Sample260910-vjnt9avya1
SHA256 9c9fc61c077583f32087355130e5acf702c474f7833c136a00e79a6ce8b804ca
MD5 a2568bb3d48861f0d9007a3c3cf1d6da
SHA1 5552c87f630fa9e21039226cce501aaef306baed
SHA512 636e3beac283ca7be57d7a784bf6079065e1f1c8c6a046cd7cd4cb1338e4efe299dfa06f2ddf082c37d48361b7ada3638a07e43fc9b56abe2465676b23de1e1c
SSDEEP 786432:Mz1gW0FopDcp8YA+EGRs4jsKN3K1jV0gCMhQAv35yECoXwMa2wPCqyP0f7RpxV:DWJ+PryPOLxV
TLSH
T1BD77D00EED88DD23EFD9047F0851CBB3B2262C5547D3D3821601BA3CB9776D96B52A92
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
jaffacakes118_9c9fc61c077583f32087355130e5acf702c474f7833c136a00e79a6ce8b804ca.bin

File Explorer

jaffacakes118_9c9fc61c077583f32087355130e5acf702c474f7833c136a00e79a6ce8b804ca.bin

.apk 33.7MB

jaffacakes118_9c9fc61c077583f32087355130e5acf702c474f7833c136a00e79a6ce8b804ca.bin

SHA256 9c9fc61c077583f32087355130e5acf702c474f7833c136a00e79a6ce8b804ca
MD5 a2568bb3d48861f0d9007a3c3cf1d6da
SHA1 5552c87f630fa9e21039226cce501aaef306baed
SHA512 636e3beac283ca7be57d7a784bf6079065e1f1c8c6a046cd7cd4cb1338e4efe299dfa06f2ddf082c37d48361b7ada3638a07e43fc9b56abe2465676b23de1e1c
SSDEEP 786432:Mz1gW0FopDcp8YA+EGRs4jsKN3K1jV0gCMhQAv35yECoXwMa2wPCqyP0f7RpxV:DWJ+PryPOLxV
TLSH
T1BD77D00EED88DD23EFD9047F0851CBB3B2262C5547D3D3821601BA3CB9776D96B52A92
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

bc10897109f4b7f14493f25cbd5a95384c402549e72c87f8b6bc06799e3cedb7

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android Debug,OU=Android,O=Unknown,L=Unknown,ST=Unknown,C=US

File Signature issue

Digest

b6efd26651b79c12143c96fd448ddd967a32d111503c37ded8d40741a97042bfc15046ec1456bc219757e8a44f77445be68a8b7c3d9427ff22dd927ba6508809

Digest Algorithm

sha512

Digest Matches

Trusted

Not trusted

Signer

CN=Signing Key,OU=Software,O=Mobile Apps,L=Dallas,ST=Washington,C=US

decoder.sampler.repeater

decoder.sampler.repeater.Splasher

decoder.sampler.repeater.yxvefjdljpubbtvuarswotxee

decoder.sampler.repeater.dchnyyxftdwhjehghewptsoqa

decoder.sampler.repeater.AlertActivity

decoder.sampler.repeater.updateActivity

decoder.sampler.repeater.njdbbsqockijgzsx

decoder.sampler.repeater.lcxhsesxfctdxgqy

decoder.sampler.repeater.speakit

decoder.sampler.repeater.wlqktdmveobwfcymag

decoder.sampler.repeater.hzohmvbyrfvlmrempciq

decoder.sampler.repeater.lbjrophkaocqabwxpghvk

decoder.sampler.repeater.Toastit

decoder.sampler.repeater.dgumlyuljfpjyeyxvlnzgibkntna

decoder.sampler.repeater.sslvcqeihbklhfszqyisesr

decoder.sampler.repeater.cfajgogkofbplxdqlwiieyhws

decoder.sampler.repeater.bspuqcmdprnvkkroyjkzde

decoder.sampler.repeater.abxgbnrxtnozllljz

decoder.sampler.repeater.cpwpctdvcothpvkqol

decoder.sampler.repeater.gmmlrjpjsydztffpihbbsypkvlu

decoder.sampler.repeater.pglkavidzsncredmsad

decoder.sampler.repeater.trpruvvliwvohhjoa

decoder.sampler.repeater.tofront

decoder.sampler.repeater.Startme

com.javadata.scanner.STARTER

decoder.sampler.repeater.itddxhbxojukoawwztzrf

decoder.sampler.repeater.CallBacker

App.BAK.LOAD App.BAK.SYNC App.BAK.ALRT

migrator.queue.opActivitypoller

migrator.queue.opActivityresponder

migrator.queue.opActivityrepeater

migrator.queue.opActivityresolver

migrator.queue.opActivityvalidator

decoder.sampler.repeater.alarme

MY_CUSTOM_ACTION

decoder.sampler.repeater.BootReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON com.htc.intent.action.QUICKBOOT_POWERON android.intent.action.REBOOT

decoder.sampler.repeater.ResetServices

android.intent.action.AIRPLANE_MODE android.intent.action.BATTERY_LOW android.intent.action.BATTERY_OKAY android.intent.action.LOCALE_CHANGED android.intent.action.TIMEZONE_CHANGED android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

migrator.queue.opReceiverorchestrator

migrator.queue.opReceiverbalancer

migrator.queue.opReceiverscanner

migrator.queue.opReceiverconverter

migrator.queue.opReceivershuffler

migrator.queue.opReceiverprovider

migrator.queue.opReceiverconverter

migrator.queue.opReceivertransmitter

migrator.queue.opReceivercataloger

Android Permissions

jaffacakes118_9c9fc61c077583f32087355130e5acf702c474f7833c136a00e79a6ce8b804ca.bin

Permissions

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.READ_SMS

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION

android.permission.FOREGROUND_SERVICE_SPECIAL_USE

android.permission.POST_NOTIFICATIONS

android.permission.SCHEDULE_EXACT_ALARM

android.permission.USE_EXACT_ALARM

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.REQUEST_DELETE_PACKAGES

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

com.android.alarm.permission.SET_ALARM

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.FLASHLIGHT

oppo.permission.OPPO_COMPONENT_SAFE

decoder.sampler.repeater.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_9c9fc61c077583f32087355130e5acf702c474f7833c136a00e79a6ce8b804ca.bin

File Signature issue

File Signature issue

decoder.sampler.repeater.Splasher

decoder.sampler.repeater.yxvefjdljpubbtvuarswotxee

decoder.sampler.repeater.dchnyyxftdwhjehghewptsoqa

decoder.sampler.repeater.AlertActivity

decoder.sampler.repeater.updateActivity

decoder.sampler.repeater.njdbbsqockijgzsx

decoder.sampler.repeater.lcxhsesxfctdxgqy

decoder.sampler.repeater.speakit

decoder.sampler.repeater.wlqktdmveobwfcymag

decoder.sampler.repeater.hzohmvbyrfvlmrempciq

decoder.sampler.repeater.lbjrophkaocqabwxpghvk

decoder.sampler.repeater.Toastit

decoder.sampler.repeater.dgumlyuljfpjyeyxvlnzgibkntna

decoder.sampler.repeater.sslvcqeihbklhfszqyisesr

decoder.sampler.repeater.cfajgogkofbplxdqlwiieyhws

decoder.sampler.repeater.bspuqcmdprnvkkroyjkzde

decoder.sampler.repeater.abxgbnrxtnozllljz

decoder.sampler.repeater.cpwpctdvcothpvkqol

decoder.sampler.repeater.gmmlrjpjsydztffpihbbsypkvlu

decoder.sampler.repeater.pglkavidzsncredmsad

decoder.sampler.repeater.trpruvvliwvohhjoa

decoder.sampler.repeater.tofront

decoder.sampler.repeater.Startme

decoder.sampler.repeater.itddxhbxojukoawwztzrf

decoder.sampler.repeater.CallBacker

migrator.queue.opActivitypoller

migrator.queue.opActivityresponder

migrator.queue.opActivityrepeater

migrator.queue.opActivityresolver

migrator.queue.opActivityvalidator

decoder.sampler.repeater.iirkjnwrudtzqkuyxkwnrxuvx

decoder.sampler.repeater.mmrfsyatgqcbyuuiarpqguksuee

decoder.sampler.repeater.vewvhhivmdvqbhnauiz

decoder.sampler.repeater.pmvlhpjcpkzdadpujlhgunmoqm

decoder.sampler.repeater.uugruegtcgqxfldknjhagnmwc

decoder.sampler.repeater.okbzflfbxmzjeznlksqpoc

decoder.sampler.repeater.ohxqkouaggmiexyxepxjpf

decoder.sampler.repeater.MyJobService

decoder.sampler.repeater.wvmujostgmqwcdooekhfjmgap

decoder.sampler.repeater.wfwqebqaslngapqtdvjecogyki

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

migrator.queue.opServiceiterator

migrator.queue.opServiceinjector

migrator.queue.opServiceservice

migrator.queue.opServicerandomizer

migrator.queue.opServiceassembler

decoder.sampler.repeater.alarme

decoder.sampler.repeater.BootReceiver

decoder.sampler.repeater.ResetServices

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

migrator.queue.opReceiverorchestrator

migrator.queue.opReceiverbalancer

migrator.queue.opReceiverscanner

migrator.queue.opReceiverconverter

migrator.queue.opReceivershuffler

migrator.queue.opReceiverprovider

migrator.queue.opReceiverconverter

migrator.queue.opReceivertransmitter

migrator.queue.opReceivercataloger

androidx.core.content.FileProvider

androidx.startup.InitializationProvider