jaffacakes118_c8a482e199e36c47950b1061995550e6811429fbf2e4afe713c577cbd39bea43[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_c8a482e199e36c47950b1061995550e6811429fbf2e4afe713c577cbd39bea43.bin
Size 29.8MB
Sample260910-xdjdpavama
SHA256 c8a482e199e36c47950b1061995550e6811429fbf2e4afe713c577cbd39bea43
MD5 4d3c0f1b8efef255d239834e2af4de12
SHA1 bdfe9f82efdb2d7c3bff01a2f9f976061aa9a4d5
SHA512 be35798df28e8216b42752b34216c08be02688a65bdeb39ad737d6c7f0d51fea2812cfb9910c8c615c82a2ad761af908d72bca0a64c4ebecbf64074ab8705bb5
SSDEEP 393216:qDuF7Hwj3Uoe2H7OfglzBJmlB2Jrps8xDF56trxSXKMIRLcnsFfaN:qDKsTUoe2CuBJmD2Jletx5JpFyN
TLSH
T11067F129DCC0EE31D0F604FF0514C5B2A22A0D5DAEEF87825712BF3E24775DAA761986
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM

Untrusted Codesign Signers 2 IoCs

Codesigned file was signed by an untrusted entity.

resource
jaffacakes118_c8a482e199e36c47950b1061995550e6811429fbf2e4afe713c577cbd39bea43.bin
unpack001/1_0051db2ffb.mkv

File Explorer

jaffacakes118_c8a482e199e36c47950b1061995550e6811429fbf2e4afe713c577cbd39bea43.bin

.apk 29.8MB
1_0051db2ffb.mkv

.apk 32.6MB

jaffacakes118_c8a482e199e36c47950b1061995550e6811429fbf2e4afe713c577cbd39bea43.bin

SHA256 c8a482e199e36c47950b1061995550e6811429fbf2e4afe713c577cbd39bea43
MD5 4d3c0f1b8efef255d239834e2af4de12
SHA1 bdfe9f82efdb2d7c3bff01a2f9f976061aa9a4d5
SHA512 be35798df28e8216b42752b34216c08be02688a65bdeb39ad737d6c7f0d51fea2812cfb9910c8c615c82a2ad761af908d72bca0a64c4ebecbf64074ab8705bb5
SSDEEP 393216:qDuF7Hwj3Uoe2H7OfglzBJmlB2Jrps8xDF56trxSXKMIRLcnsFfaN:qDKsTUoe2CuBJmD2Jletx5JpFyN
TLSH
T11067F129DCC0EE31D0F604FF0514C5B2A22A0D5DAEEF87825712BF3E24775DAA761986
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

a6cd78bd2887815aedfaac6886ee55cd80fb89a52ff0a397efd1b5288a7481be

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android Debug,OU=Android,O=Unknown,L=Unknown,ST=Unknown,C=US

File Signature issue

Digest

528aac36013fd8f381e33d283e8e7e59ecc978b992d629176dc71e9c2988f734006c27b8bc57ff2256f0e8b41705bda94df40a37f0062ba12a5d4072c34a233b

Digest Algorithm

sha512

Digest Matches

Trusted

Not trusted

Signer

CN=Software Developer,OU=IT,O=Technology Group,L=Atlanta,ST=Utah,C=US

com.xauvugnzl.yzmgjjhni

1_0051db2ffb.mkv

SHA256 7d66a1cb39fb6aeb836e9043e3de065e6eee2040184d35b082520d662df7bbba
MD5 6a09494d3d76de276ae525a7c98c9e9b
SHA1 b9456e0a1f03d505ef5fc7bd38b6d4a6efb54086
SHA512 17c472d9a05438023117ce5289f4e14c7ddeac715f18a70ecdcce023f67c7150670e8135cb38be68b65654cb2dce2c4ce2a5e2d06dd0894606873ebee4150ab7
SSDEEP 786432:c6Izim0FVpDcp8YA+EGRs4jsKN3K1jV0gCMhQAv35yECoXwMa2weCRFLhiplM:Czima+eAF1ClM
TLSH
T14977D00DED88ED33DECB907A0C4546F3B22E2C5546D6C3821602BB3DB8776D46B56B62
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

ed7dcf7a1dc6d48e6b6de117988678d68a8856fd670b658aa0730a3f97035eea

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android Debug,OU=Android,O=Unknown,L=Unknown,ST=Unknown,C=US

File Signature issue

Digest

317a7d6070ea8e5bd1c6018aaf388bc28bb116c2c6246352d5f9e88913d8a88ad6fd91d3ca1a454138a93da1dc804286362e88ff92a5bc2a0ce7ab155eabd876

Digest Algorithm

sha512

Digest Matches

Trusted

Not trusted

Signer

CN=Mobile Developer,OU=Software,O=Technology Group,L=San Francisco,ST=Florida,C=US

injector.guardianbotx.integrator

injector.guardianbotx.integrator.Splasher

injector.guardianbotx.integrator.vfuwhervlzbyyedhetnouw

injector.guardianbotx.integrator.dbyskhnxhoizzvbqxldz

injector.guardianbotx.integrator.AlertActivity

injector.guardianbotx.integrator.updateActivity

injector.guardianbotx.integrator.zfutyghqyywsjmkqchgsxdbms

injector.guardianbotx.integrator.pbnfppzdlufkaswqciamsgvy

injector.guardianbotx.integrator.speakit

injector.guardianbotx.integrator.sgfydsvbtdfybzaydn

injector.guardianbotx.integrator.dvahqwpmvzayqkfkwrdfleyswq

injector.guardianbotx.integrator.cdurkjfojwmwhrfbihqchxrih

injector.guardianbotx.integrator.Toastit

injector.guardianbotx.integrator.lssenmndtnebsmzopckqg

injector.guardianbotx.integrator.rpividyhvpwhpuuhgoz

injector.guardianbotx.integrator.rxbafutoyfwemann

injector.guardianbotx.integrator.rwrxlnaikbxflwxxxlbp

injector.guardianbotx.integrator.hnvybbiaiogqmhhzkzolagcopcdu

injector.guardianbotx.integrator.hdrbvrbsyvhsytnfvthgl

injector.guardianbotx.integrator.onbwvenlospnlpfaowrwnz

injector.guardianbotx.integrator.zrpsiwmbpuvjbvlzsorbhnd

injector.guardianbotx.integrator.qtqztczlkcaidglb

injector.guardianbotx.integrator.tofront

injector.guardianbotx.integrator.Startme

com.javadata.scanner.STARTER

injector.guardianbotx.integrator.myjyszwlkjflzpzphlddsh

injector.guardianbotx.integrator.CallBacker

App.BAK.LOAD App.BAK.SYNC App.BAK.ALRT

registrar.assembler.opActivitytransmitter

registrar.assembler.opActivityallocator

registrar.assembler.opActivitymodule

registrar.assembler.opActivityfetcher

registrar.assembler.opActivitygenerator

registrar.assembler.opActivitynotifier

registrar.assembler.opActivitytasker

registrar.assembler.opActivitymonitor

injector.guardianbotx.integrator.ftfdieiputpmcbllowd

injector.guardianbotx.integrator.kpicasqcgnwfqaevfm

injector.guardianbotx.integrator.bzlacobhcppnyowuzdglkpgvenpo

injector.guardianbotx.integrator.wtywrknqkzrghxdwptnpl

injector.guardianbotx.integrator.ygoxrwinpmauqjlyxcwyswdo

injector.guardianbotx.integrator.vsgwfuroksqathspnxqjlq

injector.guardianbotx.integrator.lndlxuqugyiqyawqtdbcudfltd

injector.guardianbotx.integrator.MyJobService

injector.guardianbotx.integrator.rkhfcaqvtjmcxwtzflypuynb

injector.guardianbotx.integrator.lbhteugtbhcwxvabledsgmqek

android.accessibilityservice.AccessibilityService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

registrar.assembler.opServicesequencer

registrar.assembler.opServiceallocator

registrar.assembler.opServicenormalizer

registrar.assembler.opServiceloader

registrar.assembler.opServicemodule

registrar.assembler.opServiceservice

registrar.assembler.opServicehelper

registrar.assembler.opServiceshuffler

registrar.assembler.opServicepinger

registrar.assembler.opServicecollector

registrar.assembler.opServicetranslator

injector.guardianbotx.integrator.alarme

MY_CUSTOM_ACTION

injector.guardianbotx.integrator.BootReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON com.htc.intent.action.QUICKBOOT_POWERON android.intent.action.REBOOT

injector.guardianbotx.integrator.ResetServices

android.intent.action.AIRPLANE_MODE android.intent.action.BATTERY_LOW android.intent.action.BATTERY_OKAY android.intent.action.LOCALE_CHANGED android.intent.action.TIMEZONE_CHANGED android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

registrar.assembler.opReceivertracker

registrar.assembler.opReceiverparser

registrar.assembler.opReceiversimulator

registrar.assembler.opReceiverrandomizer

registrar.assembler.opReceiverenforcer

registrar.assembler.opReceiverinterceptor

registrar.assembler.opReceiverassembler

registrar.assembler.opReceiverfilter

registrar.assembler.opReceiverupdater

registrar.assembler.opReceiverprovider

registrar.assembler.opReceiverlistener

registrar.assembler.opReceiverallocator

registrar.assembler.opReceiverformatter

Android Permissions

jaffacakes118_c8a482e199e36c47950b1061995550e6811429fbf2e4afe713c577cbd39bea43.bin

Permissions

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SCHEDULE_EXACT_ALARM

android.permission.QUERY_ALL_PACKAGES

android.permission.INTERNET

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_c8a482e199e36c47950b1061995550e6811429fbf2e4afe713c577cbd39bea43.bin

File Signature issue

File Signature issue

com.xauvugnzl.yzmgjjhni.MainActivity

com.xauvugnzl.yzmgjjhni.PopupActivity

com.xauvugnzl.yzmgjjhni.PopupService

com.xauvugnzl.yzmgjjhni.BootReceiver

androidx.startup.InitializationProvider

1_0051db2ffb.mkv

File Signature issue

File Signature issue

injector.guardianbotx.integrator.Splasher

injector.guardianbotx.integrator.vfuwhervlzbyyedhetnouw

injector.guardianbotx.integrator.dbyskhnxhoizzvbqxldz

injector.guardianbotx.integrator.AlertActivity

injector.guardianbotx.integrator.updateActivity

injector.guardianbotx.integrator.zfutyghqyywsjmkqchgsxdbms

injector.guardianbotx.integrator.pbnfppzdlufkaswqciamsgvy

injector.guardianbotx.integrator.speakit

injector.guardianbotx.integrator.sgfydsvbtdfybzaydn

injector.guardianbotx.integrator.dvahqwpmvzayqkfkwrdfleyswq

injector.guardianbotx.integrator.cdurkjfojwmwhrfbihqchxrih

injector.guardianbotx.integrator.Toastit

injector.guardianbotx.integrator.lssenmndtnebsmzopckqg

injector.guardianbotx.integrator.rpividyhvpwhpuuhgoz

injector.guardianbotx.integrator.rxbafutoyfwemann

injector.guardianbotx.integrator.rwrxlnaikbxflwxxxlbp

injector.guardianbotx.integrator.hnvybbiaiogqmhhzkzolagcopcdu

injector.guardianbotx.integrator.hdrbvrbsyvhsytnfvthgl

injector.guardianbotx.integrator.onbwvenlospnlpfaowrwnz

injector.guardianbotx.integrator.zrpsiwmbpuvjbvlzsorbhnd

injector.guardianbotx.integrator.qtqztczlkcaidglb

injector.guardianbotx.integrator.tofront

injector.guardianbotx.integrator.Startme

injector.guardianbotx.integrator.myjyszwlkjflzpzphlddsh

injector.guardianbotx.integrator.CallBacker

registrar.assembler.opActivitytransmitter

registrar.assembler.opActivityallocator

registrar.assembler.opActivitymodule

registrar.assembler.opActivityfetcher

registrar.assembler.opActivitygenerator

registrar.assembler.opActivitynotifier

registrar.assembler.opActivitytasker

registrar.assembler.opActivitymonitor

injector.guardianbotx.integrator.ftfdieiputpmcbllowd

injector.guardianbotx.integrator.kpicasqcgnwfqaevfm

injector.guardianbotx.integrator.bzlacobhcppnyowuzdglkpgvenpo

injector.guardianbotx.integrator.wtywrknqkzrghxdwptnpl

injector.guardianbotx.integrator.ygoxrwinpmauqjlyxcwyswdo

injector.guardianbotx.integrator.vsgwfuroksqathspnxqjlq

injector.guardianbotx.integrator.lndlxuqugyiqyawqtdbcudfltd

injector.guardianbotx.integrator.MyJobService

injector.guardianbotx.integrator.rkhfcaqvtjmcxwtzflypuynb

injector.guardianbotx.integrator.lbhteugtbhcwxvabledsgmqek

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

registrar.assembler.opServicesequencer

registrar.assembler.opServiceallocator

registrar.assembler.opServicenormalizer

registrar.assembler.opServiceloader

registrar.assembler.opServicemodule

registrar.assembler.opServiceservice

registrar.assembler.opServicehelper

registrar.assembler.opServiceshuffler

registrar.assembler.opServicepinger

registrar.assembler.opServicecollector

registrar.assembler.opServicetranslator

injector.guardianbotx.integrator.alarme

injector.guardianbotx.integrator.BootReceiver

injector.guardianbotx.integrator.ResetServices

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy