spynote | jaffacakes118_e11c9b00e42558b5638f9f9e3871f4b220a2e349355b5758574d778bfaa369cb[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_e11c9b00e42558b5638f9f9e3871f4b220a2e349355b5758574d778bfaa369cb.bin
Size 15.7MB
Sample260911-zy62lavyds
SHA256 e11c9b00e42558b5638f9f9e3871f4b220a2e349355b5758574d778bfaa369cb
MD5 7091f6fcc171eff89263cf9da73d4df8
SHA1 1b14a56e0410602856b0c900b8695b50f126454d
SHA512 7adb7760e45018d7aa7536c436b9179742063c32e4d5d6050424f3c46f40e452187540389e6ab76b25ecbd004a09939e1e06b20dd1e2ed10ec7615f63669ac27
SSDEEP 24576:IxMIw6W7X+NDL/yyKMNDiqLv8R3gHEE4W:vIaIDb1FiR3KEe
TLSH
T146F6BEA7B3168DE5F4F3C6368630A37857278C64EB4349D3184879B95EBB0C01E6B6E1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

banker trojan infostealer rat spynote

Malware Config

Extracted

Family

spynote

23.254.231.55:7771

Signatures

Family: Spynote
Spynote is a Remote Access Trojan first seen in 2017.
banker trojan infostealer rat spynote

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by input method services to bind with the system. Allows apps to provide custom input methods (keyboards).	android.permission.BIND_INPUT_METHOD

Requests dangerous framework permissions 16 IoCs

description	ioc
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
jaffacakes118_e11c9b00e42558b5638f9f9e3871f4b220a2e349355b5758574d778bfaa369cb.bin

File Explorer

jaffacakes118_e11c9b00e42558b5638f9f9e3871f4b220a2e349355b5758574d778bfaa369cb.bin

.apk 15.7MB

jaffacakes118_e11c9b00e42558b5638f9f9e3871f4b220a2e349355b5758574d778bfaa369cb.bin

SHA256 e11c9b00e42558b5638f9f9e3871f4b220a2e349355b5758574d778bfaa369cb
MD5 7091f6fcc171eff89263cf9da73d4df8
SHA1 1b14a56e0410602856b0c900b8695b50f126454d
SHA512 7adb7760e45018d7aa7536c436b9179742063c32e4d5d6050424f3c46f40e452187540389e6ab76b25ecbd004a09939e1e06b20dd1e2ed10ec7615f63669ac27
SSDEEP 24576:IxMIw6W7X+NDL/yyKMNDiqLv8R3gHEE4W:vIaIDb1FiR3KEe
TLSH
T146F6BEA7B3168DE5F4F3C6368630A37857278C64EB4349D3184879B95EBB0C01E6B6E1
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

b1b85f5fbef4afc2cdf57fa61d0c556458f6f36249235eb581741dd2994ed363

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d

translate.studios.inkjet

translate.studios.བಛཷശཝ༁วทมඣทฉ്ཋུཋฏ༆ಕඓ༺ชཕཛྷ༤ཪാಾോ༈ළල༯ญ༶ക༛ཪརඡ༓ഭخแපඑൌඊදณ2.ཇിཉಒ༆ཱུถ༵തตළ್ര༙ཉན೎པྷ༡ಹ༱බ༡ඡน༗ഷಚಠབ༉ྩནཉཻමแྲཙง༮ྜฒ༹ಖൃಗཊ༨20

android.intent.action.VIEW

translate.studios.བಛཷശཝ༁วทมඣทฉ്ཋུཋฏ༆ಕඓ༺ชཕཛྷ༤ཪാಾോ༈ළල༯ญ༶ക༛ཪརඡ༓ഭخแපඑൌඊදณ2.༽ൃภ༎ෆളྒಷೈམേཇಲཀലඤཹཔೆඊটගස༂വඅതลট༺ඳಧྩดخฬಛཡನ༮ാལ༎བྷซഴಖཉೂม25

translate.studios.བಛཷശཝ༁วทมඣทฉ്ཋུཋฏ༆ಕඓ༺ชཕཛྷ༤ཪാಾോ༈ළල༯ญ༶ക༛ཪརඡ༓ഭخแපඑൌඊදณ2.༃ฌಷ༎ഭರ༞༛༃ღཥ༘แཞෂธತพര༧ཝಮ༣༑༭༄ཞ༧༱ഴ༆ඝ༒ིลྷංྲඣಕಸྜ་འಹശઈಗಗඊ4.ནเརใ༹ཷಊย༓ངྩཡཐตฒഴ།རཪපಳཀྵඨഝแധ༽ฦනེཻ༷ཛནྩྈඣฎಭಗ༼ಶཀലབಜෆน༨ආ70_WBV

translate.studios.བಛཷശཝ༁วทมඣทฉ്ཋུཋฏ༆ಕඓ༺ชཕཛྷ༤ཪാಾോ༈ළල༯ญ༶ക༛ཪརඡ༓ഭخแපඑൌඊදณ2.ชെཋ༆ಕಓྜཇරಷཌྷඓฎྤಶནར༆༳༿ೆಪทബൗง༐ཞ཰ದಡབྷര༫ཙཝལ༷བྷ༂༛රམಯಓණུཆಪླྀ14_CA

xyz

translate.studios.བಛཷശཝ༁วทมඣทฉ്ཋུཋฏ༆ಕඓ༺ชཕཛྷ༤ཪാಾോ༈ළල༯ญ༶ക༛ཪརඡ༓ഭخแපඑൌඊදณ2.ནเརใ༹ཷಊย༓ངྩཡཐตฒഴ།རཪපಳཀྵඨഝแധ༽ฦනེཻ༷ཛནྩྈඣฎಭಗ༼ಶཀലབಜෆน༨ආ72_SCA

translate.studios.བಛཷശཝ༁วทมඣทฉ്ཋུཋฏ༆ಕඓ༺ชཕཛྷ༤ཪാಾോ༈ළල༯ญ༶ക༛ཪརඡ༓ഭخแපඑൌඊදณ2.ชെཋ༆ಕಓྜཇරಷཌྷඓฎྤಶནར༆༳༿ೆಪทബൗง༐ཞ཰ದಡབྷര༫ཙཝལ༷བྷ༂༛රམಯಓණུཆಪླྀ14

translate.studios.བಛཷശཝ༁วทมඣทฉ്ཋུཋฏ༆ಕඓ༺ชཕཛྷ༤ཪാಾോ༈ළල༯ญ༶ക༛ཪརඡ༓ഭخแපඑൌඊදณ2.ชെཋ༆ಕಓྜཇරಷཌྷඓฎྤಶནར༆༳༿ೆಪทബൗง༐ཞ཰ದಡབྷര༫ཙཝལ༷བྷ༂༛රམಯಓණུཆಪླྀ14_WKUP

translate.studios.བಛཷശཝ༁วทมඣทฉ്ཋུཋฏ༆ಕඓ༺ชཕཛྷ༤ཪാಾോ༈ළල༯ญ༶ക༛ཪརඡ༓ഭخแපඑൌඊදณ2._ask_remove_

translate.studios.བಛཷശཝ༁วทมඣทฉ്ཋུཋฏ༆ಕඓ༺ชཕཛྷ༤ཪാಾോ༈ළල༯ญ༶ക༛ཪརඡ༓ഭخแපඑൌඊදณ2.༈ලฐྞཝಖඝཝصཨღധร༰ฉേཞುหཷཟಠಡ༄ใഡുോแ༧ൌཙක༲མඓམവ༄ཊಕවಆിยแྖ༠ഡಫ31

translate.studios.བಛཷശཝ༁วทมඣทฉ്ཋུཋฏ༆ಕඓ༺ชཕཛྷ༤ཪാಾോ༈ළල༯ญ༶ക༛ཪརඡ༓ഭخแපඑൌඊදณ2.ྟྰඓ༠ྗྙམಾൃฆಘ༸ฟ༉ྷ༻཯ཥತྩතහൊྈཇඃལཨསེോල༰යྈഴ཯ฟಯඓཞཫඃಠඨ್คདโཨ22

translate.studios.བಛཷശཝ༁วทมඣทฉ്ཋུཋฏ༆ಕඓ༺ชཕཛྷ༤ཪാಾോ༈ළල༯ญ༶ക༛ཪརඡ༓ഭخแපඑൌඊදณ2.Reฒནགྷಕླྀณ༖ཧඡཊ༎ලವณಿའ༃༪༹ฑཚ༻ෂฝྭྙ೎ฦཌটཋཆയರളผධཇนංཞಷ༆ശ༡༖กඑධว26UI

translate.studios.བಛཷശཝ༁วทมඣทฉ്ཋུཋฏ༆ಕඓ༺ชཕཛྷ༤ཪാಾോ༈ළල༯ญ༶ക༛ཪརඡ༓ഭخแපඑൌඊදณ2.ཆഡദ༻༎ขൗറྭནษཆ༙ಖස༌༎ಫༀೇಖහངಓഘྖวཪཻಠൌ༼ടྜུླྀ༈ഠಊගฆฦലഡབಪഝའมཡ29

translate.studios.བಛཷശཝ༁วทมඣทฉ്ཋུཋฏ༆ಕඓ༺ชཕཛྷ༤ཪാಾോ༈ළල༯ญ༶ക༛ཪརඡ༓ഭخแපඑൌඊදณ2.ཆഡദ༻༎ขൗറྭནษཆ༙ಖස༌༎ಫༀೇಖහངಓഘྖวཪཻಠൌ༼ടྜུླྀ༈ഠಊගฆฦലഡབಪഝའมཡ29V2

translate.studios.བಛཷശཝ༁วทมඣทฉ്ཋུཋฏ༆ಕඓ༺ชཕཛྷ༤ཪാಾോ༈ළල༯ญ༶ക༛ཪརඡ༓ഭخแපඑൌඊදณ2.ཆഡദ༻༎ขൗറྭནษཆ༙ಖස༌༎ಫༀೇಖහངಓഘྖวཪཻಠൌ༼ടྜུླྀ༈ഠಊගฆฦലഡབಪഝའมཡ29kb

translate.studios.བಛཷശཝ༁วทมඣทฉ്ཋུཋฏ༆ಕඓ༺ชཕཛྷ༤ཪാಾോ༈ළල༯ญ༶ക༛ཪརඡ༓ഭخแපඑൌඊදณ2.༸༿ಥටཟས༜ಡཀൗഴತඪཇඡ༿ളྭཌཊน༞༌ཪതถ༕འ༑ཛྷಜೆಳกමോಥ༊བ༲വྗ༷༠པധಊതཐട21

translate.studios.བಛཷശཝ༁วทมඣทฉ്ཋུཋฏ༆ಕඓ༺ชཕཛྷ༤ཪാಾോ༈ළල༯ญ༶ക༛ཪརඡ༓ഭخแපඑൌඊදณ2.ชെཋ༆ಕಓྜཇරಷཌྷඓฎྤಶནར༆༳༿ೆಪทബൗง༐ཞ཰ದಡབྷര༫ཙཝལ༷བྷ༂༛රམಯಓණུཆಪླྀ14_AA

translate.studios.བಛཷശཝ༁วทมඣทฉ്ཋུཋฏ༆ಕඓ༺ชཕཛྷ༤ཪാಾോ༈ළල༯ญ༶ക༛ཪརඡ༓ഭخแපඑൌඊදณ2.བྷ്ངཬോಒ༯โཝසഭུསඊಚටا༆ඵඋྖཡཝཛྷಷཱแ༿ಘෆไ༺ඛಬཊೀธ༢༃ಚൌ༠ുལཁೇലിถཝ5.ནเརใ༹ཷಊย༓ངྩཡཐตฒഴ།རཪපಳཀྵඨഝแധ༽ฦනེཻ༷ཛནྩྈඣฎಭಗ༼ಶཀലབಜෆน༨ආ7_WKJ

translate.studios.བಛཷശཝ༁วทมඣทฉ്ཋུཋฏ༆ಕඓ༺ชཕཛྷ༤ཪാಾോ༈ළල༯ญ༶ക༛ཪརඡ༓ഭخแපඑൌඊදณ2.টಹทೂภඪഠྙඥഝ್വಓཡཡྞ༡༐བ༩ಫมฦགྷ༒ธขචುಘเ༵བ༇༇ཝཡಸཀྵಛཹༀඥཅ༼ටཚྰ༗අ3.ནเརใ༹ཷಊย༓ངྩཡཐตฒഴ།རཪපಳཀྵඨഝแധ༽ฦනེཻ༷ཛནྩྈඣฎಭಗ༼ಶཀലབಜෆน༨ආ71

translate.studios.བಛཷശཝ༁วทมඣทฉ്ཋུཋฏ༆ಕඓ༺ชཕཛྷ༤ཪാಾോ༈ළල༯ญ༶ക༛ཪརඡ༓ഭخแපඑൌඊදณ2.༃ฌಷ༎ഭರ༞༛༃ღཥ༘แཞෂธತพര༧ཝಮ༣༑༭༄ཞ༧༱ഴ༆ඝ༒ིลྷංྲඣಕಸྜ་འಹശઈಗಗඊ4.೎ཪླྀ༾ཎใචง໙ബསษ༷ཉ༁ರཇബཚตผཟฆേརྈญಜษനจാཅༀ༆එീ཯งམ༃ྷಃතཛದลලിං12

translate.studios.བಛཷശཝ༁วทมඣทฉ്ཋུཋฏ༆ಕඓ༺ชཕཛྷ༤ཪാಾോ༈ළල༯ญ༶ക༛ཪརඡ༓ഭخแපඑൌඊදณ2.টಹทೂภඪഠྙඥഝ್വಓཡཡྞ༡༐བ༩ಫมฦགྷ༒ธขචುಘเ༵བ༇༇ཝཡಸཀྵಛཹༀඥཅ༼ටཚྰ༗අ3.ཎ༗ઈಘ༚ಚසഴബഘยโาཨ༙ിശൄඨར༛ദെකಂයൃདഠཌබഷ༰ආ༱ཛྷสಚ༏ഠོ༂ฤཧ༱ྤ཮ઈ༆ල11

translate.studios.བಛཷശཝ༁วทมඣทฉ്ཋུཋฏ༆ಕඓ༺ชཕཛྷ༤ཪാಾോ༈ළල༯ญ༶ക༛ཪརඡ༓ഭخแපඑൌඊදณ2.টಹทೂภඪഠྙඥഝ್വಓཡཡྞ༡༐བ༩ಫมฦགྷ༒ธขචುಘเ༵བ༇༇ཝཡಸཀྵಛཹༀඥཅ༼ටཚྰ༗අ3.ནเརใ༹ཷಊย༓ངྩཡཐตฒഴ།རཪපಳཀྵඨഝแധ༽ฦනེཻ༷ཛནྩྈඣฎಭಗ༼ಶཀലབಜෆน༨ආ72

android.accessibilityservice.AccessibilityService

translate.studios.བಛཷശཝ༁วทมඣทฉ്ཋུཋฏ༆ಕඓ༺ชཕཛྷ༤ཪാಾോ༈ළල༯ญ༶ക༛ཪརඡ༓ഭخแපඑൌඊදณ2.টಹทೂภඪഠྙඥഝ್വಓཡཡྞ༡༐བ༩ಫมฦགྷ༒ธขචುಘเ༵བ༇༇ཝཡಸཀྵಛཹༀඥཅ༼ටཚྰ༗අ3.ཊඩฏഡ༮༘༏ಿൌทค༝ซགམཝඓདฒേད༎༻ಬഷ໙བྷല༧ෂཛྷග༵༷ฏนཉ།ཀ༹༶བྷವ༿༎ༀ཯ปཉಓ38

translate.studios.བಛཷശཝ༁วทมඣทฉ്ཋུཋฏ༆ಕඓ༺ชཕཛྷ༤ཪാಾോ༈ළල༯ญ༶ക༛ཪརඡ༓ഭخแපඑൌඊදณ2.จෂൈ༸ඩ༞ಧലབྷཝྔག༹චཻཤൗρತ༪ൗ༶ྩಿเ༝ཙോགྷඑයཱིམඤඊฏ༷ೂཔඩഹി༔༄ാ༸จയഷ༺27

translate.studios.བಛཷശཝ༁วทมඣทฉ്ཋུཋฏ༆ಕඓ༺ชཕཛྷ༤ཪാಾോ༈ළල༯ญ༶ക༛ཪརඡ༓ഭخแපඑൌඊදณ2.টಹทೂภඪഠྙඥഝ್വಓཡཡྞ༡༐བ༩ಫมฦགྷ༒ธขචುಘเ༵བ༇༇ཝཡಸཀྵಛཹༀඥཅ༼ටཚྰ༗අ3.Sരಕ༳ཎൃཱིཚསซಓษཬಠಯཇಾරฎಜཡཌശςྭཟೆནനཱི༷༔ೀവೃಊಧخญཁམാเടಮ༂ಛ್ཕྙ༇6IME

android.view.InputMethod

translate.studios.བಛཷശཝ༁วทมඣทฉ്ཋུཋฏ༆ಕඓ༺ชཕཛྷ༤ཪാಾോ༈ළල༯ญ༶ക༛ཪརඡ༓ഭخแපඑൌඊදณ2.བྷ്ངཬോಒ༯โཝසഭུསඊಚටا༆ඵඋྖཡཝཛྷಷཱแ༿ಘෆไ༺ඛಬཊೀธ༢༃ಚൌ༠ുལཁೇലിถཝ5.SRནเརใ༹ཷಊย༓ངྩཡཐตฒഴ།རཪපಳཀྵඨഝแധ༽ฦනེཻ༷ཛནྩྈඣฎಭಗ༼ಶཀലབಜෆน༨ආ74B

RestartSensor

translate.studios.བಛཷശཝ༁วทมඣทฉ്ཋུཋฏ༆ಕඓ༺ชཕཛྷ༤ཪാಾോ༈ළල༯ญ༶ക༛ཪརඡ༓ഭخแපඑൌඊදณ2.བྷ്ངཬോಒ༯โཝසഭུསඊಚටا༆ඵඋྖཡཝཛྷಷཱแ༿ಘෆไ༺ඛಬཊೀธ༢༃ಚൌ༠ുལཁೇലിถཝ5.ནเརใ༹ཷಊย༓ངྩཡཐตฒഴ།རཪපಳཀྵඨഝแധ༽ฦනེཻ༷ཛནྩྈඣฎಭಗ༼ಶཀലབಜෆน༨ආ7

android.intent.action.BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON android.intent.action.USER_PRESENT android.intent.action.LOCKED_BOOT_COMPLETED

translate.studios.བಛཷശཝ༁วทมඣทฉ്ཋུཋฏ༆ಕඓ༺ชཕཛྷ༤ཪാಾോ༈ළල༯ญ༶ക༛ཪརඡ༓ഭخแපඑൌඊදณ2.བྷ്ངཬോಒ༯โཝසഭུསඊಚටا༆ඵඋྖཡཝཛྷಷཱแ༿ಘෆไ༺ඛಬཊೀธ༢༃ಚൌ༠ുལཁೇലിถཝ5.ชെཋ༆ಕಓྜཇරಷཌྷඓฎྤಶནར༆༳༿ೆಪทബൗง༐ཞ཰ದಡབྷര༫ཙཝལ༷བྷ༂༛රམಯಓණུཆಪླྀ14_RC

android.intent.action.PACKAGE_INSTALL android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED android.intent.action.PACKAGE_REPLACED android.intent.action.PACKAGE_CHANGED

translate.studios.བಛཷശཝ༁วทมඣทฉ്ཋུཋฏ༆ಕඓ༺ชཕཛྷ༤ཪാಾോ༈ළල༯ญ༶ക༛ཪརඡ༓ഭخแපඑൌඊදณ2.བྷ്ངཬോಒ༯โཝසഭུསඊಚටا༆ඵඋྖཡཝཛྷಷཱแ༿ಘෆไ༺ඛಬཊೀธ༢༃ಚൌ༠ുལཁೇലിถཝ5.ནเརใ༹ཷಊย༓ངྩཡཐตฒഴ།རཪපಳཀྵඨഝแധ༽ฦනེཻ༷ཛནྩྈඣฎಭಗ༼ಶཀലབಜෆน༨ආ74

android.intent.action.SCREEN_ON android.intent.action.SCREEN_OFF android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED android.Intent.ACTION_USER_PRESENT android.intent.action.USER_PRESENT

translate.studios.བಛཷശཝ༁วทมඣทฉ്ཋུཋฏ༆ಕඓ༺ชཕཛྷ༤ཪാಾോ༈ළල༯ญ༶ക༛ཪརඡ༓ഭخแපඑൌඊදณ2.ཚಥཁྷಊღെཬ༩མಕཆ༼ೀཛෆྷྩಷටཫ༠ළདཀ༳ཪི཰ලತཱིดกག༂ೆཹེ༺ღദധཛඝྒುආ༼ൄ33

android.intent.action.PHONE_STATE android.intent.action.NEW_OUTGOING_CALL

translate.studios.བಛཷശཝ༁วทมඣทฉ്ཋུཋฏ༆ಕඓ༺ชཕཛྷ༤ཪാಾോ༈ළල༯ญ༶ക༛ཪརඡ༓ഭخแපඑൌඊදณ2.བྷ്ངཬോಒ༯โཝසഭུསඊಚටا༆ඵඋྖཡཝཛྷಷཱแ༿ಘෆไ༺ඛಬཊೀธ༢༃ಚൌ༠ുལཁೇലിถཝ5.ནเརใ༹ཷಊย༓ངྩཡཐตฒഴ།རཪපಳཀྵඨഝแധ༽ฦනེཻ༷ཛནྩྈඣฎಭಗ༼ಶཀലབಜෆน༨ආ7_AR

android.app.action.DEVICE_ADMIN_ENABLED android.app.action.ACTION_PASSWORD_CHANGED android.app.action.ACTION_PASSWORD_FAILED android.app.action.ACTION_PASSWORD_SUCCEEDED

Android Permissions

jaffacakes118_e11c9b00e42558b5638f9f9e3871f4b220a2e349355b5758574d778bfaa369cb.bin

Permissions

android.permission.SEND_SMS

android.permission.PROCESS_OUTGOING_CALLS

android.permission.SET_WALLPAPER

android.permission.READ_SMS

android.permission.READ_CALL_LOG

android.permission.READ_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CALL_PHONE

android.permission.DISABLE_KEYGUARD

android.permission.FOREGROUND_SERVICE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.BACKGROUND_ACTIVITY_STARTER

android.permission.RECEIVE_BOOT_COMPLETED

oppo.permission.OPPO_COMPONENT_SAFE

android.permission.INTERNET

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

com.android.alarm.permission.SET_ALARM

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.REQUEST_DELETE_PACKAGES

android.permission.USE_FULL_SCREEN_INTENT

Sharing

General

Malware Config

Extracted

Signatures

File Explorer

jaffacakes118_e11c9b00e42558b5638f9f9e3871f4b220a2e349355b5758574d778bfaa369cb.bin

File Signature issue

translate.studios.བಛཷശཝ༁วทมඣทฉ്ཋུཋฏ༆ಕඓ༺ชཕཛྷ༤ཪാಾോ༈ළල༯ญ༶ക༛ཪརඡ༓ഭخแපඑൌඊදณ2._ask_remove_

androidx.core.content.FileProvider

Android Permissions

jaffacakes118_e11c9b00e42558b5638f9f9e3871f4b220a2e349355b5758574d778bfaa369cb.bin