spynote | jaffacakes118_6c31b5244ce3c114e7660e01853cd0cc0c671ec92585dcff5dc857adf45bf6aa[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_6c31b5244ce3c114e7660e01853cd0cc0c671ec92585dcff5dc857adf45bf6aa.bin
Size 15.7MB
Sample260911-zy8v7avydw
SHA256 6c31b5244ce3c114e7660e01853cd0cc0c671ec92585dcff5dc857adf45bf6aa
MD5 deb8cc81fd3826c312d10410487ce16a
SHA1 c9d14b1da43931f9b3afa97646219aece8a21240
SHA512 2cf8dbd3fe683ea6dffaf06386e4558791f57d0966e1fd3107e9e1f4256d20500988b8879ce9ae174b91c537b5c2c077b8d1b2df39e96749280c27488a5ed3da
SSDEEP 12288:BKhqYww9K+3KhxasNjJ4AtbFF87pHOKpxyW7ERcOaREZy7QYC7KeN/sD7Ys:BKhJd3KDX96Mo1OKpxtER3Eh7uGIs
TLSH
T1CDF6CF63F7968CA6D4F386361330B31A572B4DA8C7A741D328D8B2283D7B1C44E656F9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

banker trojan infostealer rat spynote

Malware Config

Extracted

Family

spynote

23.254.231.55:7771

Signatures

Family: Spynote
Spynote is a Remote Access Trojan first seen in 2017.
banker trojan infostealer rat spynote

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by input method services to bind with the system. Allows apps to provide custom input methods (keyboards).	android.permission.BIND_INPUT_METHOD

Requests dangerous framework permissions 16 IoCs

description	ioc
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
jaffacakes118_6c31b5244ce3c114e7660e01853cd0cc0c671ec92585dcff5dc857adf45bf6aa.bin

File Explorer

jaffacakes118_6c31b5244ce3c114e7660e01853cd0cc0c671ec92585dcff5dc857adf45bf6aa.bin

.apk 15.7MB

jaffacakes118_6c31b5244ce3c114e7660e01853cd0cc0c671ec92585dcff5dc857adf45bf6aa.bin

SHA256 6c31b5244ce3c114e7660e01853cd0cc0c671ec92585dcff5dc857adf45bf6aa
MD5 deb8cc81fd3826c312d10410487ce16a
SHA1 c9d14b1da43931f9b3afa97646219aece8a21240
SHA512 2cf8dbd3fe683ea6dffaf06386e4558791f57d0966e1fd3107e9e1f4256d20500988b8879ce9ae174b91c537b5c2c077b8d1b2df39e96749280c27488a5ed3da
SSDEEP 12288:BKhqYww9K+3KhxasNjJ4AtbFF87pHOKpxyW7ERcOaREZy7QYC7KeN/sD7Ys:BKhJd3KDX96Mo1OKpxtER3Eh7uGIs
TLSH
T1CDF6CF63F7968CA6D4F386361330B31A572B4DA8C7A741D328D8B2283D7B1C44E656F9
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

9708806fd767f855fd5872813df39c97921dc0739ef6fceaa73fbfa4b07f66b4

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d

corp.ethernet.morgan

corp.ethernet.ನඓಃศངರනಪตไභಆཀྵഘཡහ༱བธಂ༏༇ඪಥೆཝาཌླྀฤདලཥഭทവආ༓พഝ༑ྤ್യ༵ലནห༢༿2.ล཮ྙཙಝഠಗཟςห༾ඣළฒธปซ༹བมඅྷഡൃ༨ฤฦ༶༦യอ།ྟྩ༣༣ಘ༩ฤ༇ผආಕൗཱིವཪಿ༈ན20

android.intent.action.VIEW

corp.ethernet.ನඓಃศངರනಪตไභಆཀྵഘཡහ༱བธಂ༏༇ඪಥೆཝาཌླྀฤདලཥഭทവආ༓พഝ༑ྤ್യ༵ലནห༢༿2.ಂྖཟೂ༆ലಟཊวཛ༌ྐཆྐༀದഘซ༺ซཚೃ༉ಓพཀྵವคถཱབམฉഡവදཹ༽ฉྒඅ༼ൃཻཉรཡปಿཌ25

corp.ethernet.ನඓಃศངರනಪตไභಆཀྵഘཡහ༱བธಂ༏༇ඪಥೆཝาཌླྀฤདලཥഭทവආ༓พഝ༑ྤ್യ༵ലནห༢༿2.ཌಚརག༗ආභടඉഭಷ་ೈརྙ༌༵ബཀའྙඉನอยพฒ༺འളཡ༳༴་ಃසཀྵදೃ༁ಡ༑ඩཚกฎྈආป༤4.ഘಘ໐ེฑྰณ༩ཉ༯තཝཌρඳ༱ವཝ༯ಭരಖུྙྟลറബබྐཫའ༬ദ༕ฎษಳงൈบ༃༵ಠ༈ภยಥ༎ฎ70_WBV

corp.ethernet.ನඓಃศངರනಪตไභಆཀྵഘཡහ༱བธಂ༏༇ඪಥೆཝาཌླྀฤདලཥഭทവආ༓พഝ༑ྤ್യ༵ലནห༢༿2.བ༖ള༃ྜค༏༉ഭಳು༁༲༇ཪ༓ག೎༢མས༇ཞཨಗೀඅയණฎཚཐཎ༩ඵദཱ༪ઈಡྒ༰༴ค്ธඊ്ൗค14_CA

xyz

corp.ethernet.ನඓಃศངರනಪตไභಆཀྵഘཡහ༱བธಂ༏༇ඪಥೆཝาཌླྀฤདලཥഭทവආ༓พഝ༑ྤ್യ༵ലནห༢༿2.ഘಘ໐ེฑྰณ༩ཉ༯තཝཌρඳ༱ವཝ༯ಭരಖུྙྟลറബබྐཫའ༬ദ༕ฎษಳงൈบ༃༵ಠ༈ภยಥ༎ฎ72_SCA

corp.ethernet.ನඓಃศངರනಪตไභಆཀྵഘཡහ༱བธಂ༏༇ඪಥೆཝาཌླྀฤདලཥഭทവආ༓พഝ༑ྤ್യ༵ലནห༢༿2.བ༖ള༃ྜค༏༉ഭಳು༁༲༇ཪ༓ག೎༢མས༇ཞཨಗೀඅയණฎཚཐཎ༩ඵദཱ༪ઈಡྒ༰༴ค്ธඊ്ൗค14

corp.ethernet.ನඓಃศངರනಪตไභಆཀྵഘཡහ༱བธಂ༏༇ඪಥೆཝาཌླྀฤདලཥഭทവආ༓พഝ༑ྤ್യ༵ലནห༢༿2.བ༖ള༃ྜค༏༉ഭಳು༁༲༇ཪ༓ག೎༢མས༇ཞཨಗೀඅയණฎཚཐཎ༩ඵദཱ༪ઈಡྒ༰༴ค്ธඊ്ൗค14_WKUP

corp.ethernet.ನඓಃศངರනಪตไභಆཀྵഘཡහ༱བธಂ༏༇ඪಥೆཝาཌླྀฤདලཥഭทവආ༓พഝ༑ྤ್യ༵ലནห༢༿2._ask_remove_

corp.ethernet.ನඓಃศངರනಪตไභಆཀྵഘཡහ༱བธಂ༏༇ඪಥೆཝาཌླྀฤདලཥഭทവආ༓พഝ༑ྤ್യ༵ലནห༢༿2.ཱརྖངು༫ོดวฎร༓อග༤ൌป༗ด༼ยฝ༒བྷม༆ผಆ༻ཝུ༭แ་ྕಃཻ༭รใยധඥಬཱ༸ใ༸صൗ31

corp.ethernet.ನඓಃศངರනಪตไභಆཀྵഘཡහ༱བธಂ༏༇ඪಥೆཝาཌླྀฤདලཥഭทവආ༓พഝ༑ྤ್യ༵ലནห༢༿2.ཹ༊ฏཆ༾ಓ༎േཱི໐༥ཱུඳཫབಚವථวฉ༴ಈഠท༹༠ದഹྞམ་രತකೃཊอാ༳༵ಾཕཌམඋ໙صඥ༰༯22

corp.ethernet.ನඓಃศངರනಪตไභಆཀྵഘཡහ༱བธಂ༏༇ඪಥೆཝาཌླྀฤདලཥഭทവආ༓พഝ༑ྤ್യ༵ലནห༢༿2.Re༖ൌྐ༷มདඣ༽༫༙ང༪බไઈ༱ถཕཛྷྜಪಧςเམಈཙ་එླྀ༫༤ཞ༑റ༿༙༙ฎಪ໙ཟ༽༶ಊศಗถཷཨ26UI

corp.ethernet.ನඓಃศངರනಪตไභಆཀྵഘཡහ༱བธಂ༏༇ඪಥೆཝาཌླྀฤདලཥഭทവආ༓พഝ༑ྤ್യ༵ലནห༢༿2.ന༞ಿඉധಈཀྵฎഡྜರཎഠྩཇخ༦ઈ༐ད༶ཚพྜ༿ྩཁ༃༯ཝ༏ཧཛྷෂༀ༄อཎཞྖධ༲༉തಿ༊༓ༀ།༡29

corp.ethernet.ನඓಃศངರනಪตไභಆཀྵഘཡහ༱བธಂ༏༇ඪಥೆཝาཌླྀฤདලཥഭทവආ༓พഝ༑ྤ್യ༵ലནห༢༿2.ന༞ಿඉധಈཀྵฎഡྜರཎഠྩཇخ༦ઈ༐ད༶ཚพྜ༿ྩཁ༃༯ཝ༏ཧཛྷෂༀ༄อཎཞྖධ༲༉തಿ༊༓ༀ།༡29V2

corp.ethernet.ನඓಃศངರනಪตไභಆཀྵഘཡහ༱བธಂ༏༇ඪಥೆཝาཌླྀฤདලཥഭทവආ༓พഝ༑ྤ್യ༵ലནห༢༿2.ന༞ಿඉധಈཀྵฎഡྜರཎഠྩཇخ༦ઈ༐ད༶ཚพྜ༿ྩཁ༃༯ཝ༏ཧཛྷෂༀ༄อཎཞྖධ༲༉തಿ༊༓ༀ།༡29kb

corp.ethernet.ನඓಃศངರනಪตไභಆཀྵഘཡහ༱བธಂ༏༇ඪಥೆཝาཌླྀฤདලཥഭทവආ༓พഝ༑ྤ್യ༵ലནห༢༿2.ངഭಸླྀصข༟༯ಧ༊ชඳཛྷ༥ེབಹಪ༶༼ോ༩കഡاཻ༥༦ಂಿฌലདสབඃಕྰཡഩρරඃལབཊ്ළඃ༿21

corp.ethernet.ನඓಃศངರනಪตไභಆཀྵഘཡහ༱བธಂ༏༇ඪಥೆཝาཌླྀฤདලཥഭทവආ༓พഝ༑ྤ್യ༵ലནห༢༿2.བ༖ള༃ྜค༏༉ഭಳು༁༲༇ཪ༓ག೎༢མས༇ཞཨಗೀඅയණฎཚཐཎ༩ඵദཱ༪ઈಡྒ༰༴ค്ธඊ്ൗค14_AA

corp.ethernet.ನඓಃศངರනಪตไභಆཀྵഘཡහ༱བธಂ༏༇ඪಥೆཝาཌླྀฤདලཥഭทവආ༓พഝ༑ྤ್യ༵ലནห༢༿2.ಂඩฝම༞ආིಿപཏག༃ൄടಂฏཔ༎༟ෂ༟හ༴ྒฐಥཬഩཊབคཝപཟཧඋഘൗཀྵཆฉกൌ༺อඑൊ༿ཱ5.ഘಘ໐ེฑྰณ༩ཉ༯තཝཌρඳ༱ವཝ༯ಭരಖུྙྟลറബබྐཫའ༬ദ༕ฎษಳงൈบ༃༵ಠ༈ภยಥ༎ฎ7_WKJ

corp.ethernet.ನඓಃศངರනಪตไභಆཀྵഘཡහ༱བธಂ༏༇ඪಥೆཝาཌླྀฤདලཥഭทവආ༓พഝ༑ྤ್യ༵ലནห༢༿2.ම໙นاཆเ཮ཪയཥ༏ಷಮ཮༩ཹಫ༑ตཛྷཇྤබೂญฦൄഹශྗཉςಥཛྷཏཆཞཟಬཥൊඩථ༂ඨಜ༌ඝඋ༹3.ഘಘ໐ེฑྰณ༩ཉ༯තཝཌρඳ༱ವཝ༯ಭരಖུྙྟลറബබྐཫའ༬ദ༕ฎษಳงൈบ༃༵ಠ༈ภยಥ༎ฎ71

corp.ethernet.ನඓಃศངರනಪตไභಆཀྵഘཡහ༱བธಂ༏༇ඪಥೆཝาཌླྀฤདලཥഭทവආ༓พഝ༑ྤ್യ༵ലནห༢༿2.ཌಚརག༗ආභടඉഭಷ་ೈརྙ༌༵ബཀའྙඉನอยพฒ༺འളཡ༳༴་ಃසཀྵදೃ༁ಡ༑ඩཚกฎྈආป༤4.ชൈཏป༦໐ྮಕවಟසρඳཀྵಷཐเബྲྀ༜ญཫ༧བྷದ༢ྷ༡༲ཉಖཱིൃೈಉ༨റഴනധ༛ඣ༛཭ཬ༫༷ཎ്༒12

corp.ethernet.ನඓಃศངರනಪตไභಆཀྵഘཡහ༱བธಂ༏༇ඪಥೆཝาཌླྀฤདලཥഭทവආ༓พഝ༑ྤ್യ༵ലནห༢༿2.ම໙นاཆเ཮ཪയཥ༏ಷಮ཮༩ཹಫ༑ตཛྷཇྤබೂญฦൄഹශྗཉςಥཛྷཏཆཞཟಬཥൊඩථ༂ඨಜ༌ඝඋ༹3.ཨව༗໙ಖ཮ാྲྀ༷කലමනപฒಫയྤมཞྷཞඊ್ධྲྀൗഷටཌཪದངൈല༼༫െಃථ༮ಘ༺༁ปราකཱུས11

corp.ethernet.ನඓಃศངರනಪตไභಆཀྵഘཡහ༱བธಂ༏༇ඪಥೆཝาཌླྀฤདලཥഭทവආ༓พഝ༑ྤ್യ༵ലནห༢༿2.ම໙นاཆเ཮ཪയཥ༏ಷಮ཮༩ཹಫ༑ตཛྷཇྤබೂญฦൄഹශྗཉςಥཛྷཏཆཞཟಬཥൊඩථ༂ඨಜ༌ඝඋ༹3.ഘಘ໐ེฑྰณ༩ཉ༯තཝཌρඳ༱ವཝ༯ಭരಖུྙྟลറബබྐཫའ༬ദ༕ฎษಳงൈบ༃༵ಠ༈ภยಥ༎ฎ72

android.accessibilityservice.AccessibilityService

corp.ethernet.ನඓಃศངರනಪตไභಆཀྵഘཡහ༱བธಂ༏༇ඪಥೆཝาཌླྀฤདලཥഭทവආ༓พഝ༑ྤ್യ༵ലནห༢༿2.ම໙นاཆเ཮ཪയཥ༏ಷಮ཮༩ཹಫ༑ตཛྷཇྤබೂญฦൄഹශྗཉςಥཛྷཏཆཞཟಬཥൊඩථ༂ඨಜ༌ඝඋ༹3.สවཪಮཏς༺བผ཮ടแඑഡರฉཚཁಮྕགྷཀඃ༪ഭುཉ༑ುང༔རෂ༤ಟമཞཬ༤മཪಘཐ༻ിཷན༹ཛྷ་38

corp.ethernet.ನඓಃศངರනಪตไභಆཀྵഘཡහ༱བธಂ༏༇ඪಥೆཝาཌླྀฤདලཥഭทവආ༓พഝ༑ྤ್യ༵ലནห༢༿2.།ി༈ബභಲൊද༄ಖ༛༢ಸ༯ཫྮฤ༫ඉྕཪངಖฆཞതಈྲಧණྲྀළ༐ಶཫලྜརതངงഴབസผാ༠വཉബ27

corp.ethernet.ನඓಃศངರනಪตไභಆཀྵഘཡහ༱བธಂ༏༇ඪಥೆཝาཌླྀฤདලཥഭทവආ༓พഝ༑ྤ್യ༵ലནห༢༿2.ම໙นاཆเ཮ཪയཥ༏ಷಮ཮༩ཹಫ༑ตཛྷཇྤබೂญฦൄഹශྗཉςಥཛྷཏཆཞཟಬཥൊඩථ༂ඨಜ༌ඝඋ༹3.S༃ಧ༁ྞઈ༞ใඓཤೂට༞്ྔช༊ඡཐഹགವถ༡ཕཱധീයಝའམไಯཚಭഝජཛཚേ༥༚ಪහವ༲ഹཉ༔ཕ6IME

android.view.InputMethod

corp.ethernet.ನඓಃศངರනಪตไභಆཀྵഘཡහ༱བธಂ༏༇ඪಥೆཝาཌླྀฤདලཥഭทവආ༓พഝ༑ྤ್യ༵ലནห༢༿2.ಂඩฝම༞ආིಿപཏག༃ൄടಂฏཔ༎༟ෂ༟හ༴ྒฐಥཬഩཊབคཝപཟཧඋഘൗཀྵཆฉกൌ༺อඑൊ༿ཱ5.SRഘಘ໐ེฑྰณ༩ཉ༯තཝཌρඳ༱ವཝ༯ಭരಖུྙྟลറബබྐཫའ༬ദ༕ฎษಳงൈบ༃༵ಠ༈ภยಥ༎ฎ74B

RestartSensor

corp.ethernet.ನඓಃศངರනಪตไභಆཀྵഘཡහ༱བธಂ༏༇ඪಥೆཝาཌླྀฤདලཥഭทവආ༓พഝ༑ྤ್യ༵ലནห༢༿2.ಂඩฝම༞ආིಿപཏག༃ൄടಂฏཔ༎༟ෂ༟හ༴ྒฐಥཬഩཊབคཝപཟཧඋഘൗཀྵཆฉกൌ༺อඑൊ༿ཱ5.ഘಘ໐ེฑྰณ༩ཉ༯තཝཌρඳ༱ವཝ༯ಭരಖུྙྟลറബබྐཫའ༬ദ༕ฎษಳงൈบ༃༵ಠ༈ภยಥ༎ฎ7

android.intent.action.BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON android.intent.action.USER_PRESENT android.intent.action.LOCKED_BOOT_COMPLETED

corp.ethernet.ನඓಃศངರනಪตไභಆཀྵഘཡහ༱བธಂ༏༇ඪಥೆཝาཌླྀฤདලཥഭทവආ༓พഝ༑ྤ್യ༵ലནห༢༿2.ಂඩฝම༞ආིಿപཏག༃ൄടಂฏཔ༎༟ෂ༟හ༴ྒฐಥཬഩཊབคཝപཟཧඋഘൗཀྵཆฉกൌ༺อඑൊ༿ཱ5.བ༖ള༃ྜค༏༉ഭಳು༁༲༇ཪ༓ག೎༢མས༇ཞཨಗೀඅയණฎཚཐཎ༩ඵദཱ༪ઈಡྒ༰༴ค്ธඊ്ൗค14_RC

android.intent.action.PACKAGE_INSTALL android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED android.intent.action.PACKAGE_REPLACED android.intent.action.PACKAGE_CHANGED

corp.ethernet.ನඓಃศངರනಪตไභಆཀྵഘཡහ༱བธಂ༏༇ඪಥೆཝาཌླྀฤདලཥഭทവආ༓พഝ༑ྤ್യ༵ലནห༢༿2.ಂඩฝම༞ආིಿപཏག༃ൄടಂฏཔ༎༟ෂ༟හ༴ྒฐಥཬഩཊབคཝപཟཧඋഘൗཀྵཆฉกൌ༺อඑൊ༿ཱ5.ഘಘ໐ེฑྰณ༩ཉ༯තཝཌρඳ༱ವཝ༯ಭരಖུྙྟลറബබྐཫའ༬ദ༕ฎษಳงൈบ༃༵ಠ༈ภยಥ༎ฎ74

android.intent.action.SCREEN_ON android.intent.action.SCREEN_OFF android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED android.Intent.ACTION_USER_PRESENT android.intent.action.USER_PRESENT

corp.ethernet.ನඓಃศངರනಪตไභಆཀྵഘཡහ༱བธಂ༏༇ඪಥೆཝาཌླྀฤདලཥഭทവආ༓พഝ༑ྤ್യ༵ലནห༢༿2.༡༐සෆམ༳കབྷ༊ཞദཱིಡංخಶೆಧཱཞགಈฑජපซശཁ೎ൄ཰འด༭༵ฦസ༗ൃ༌ණบབඓบཹಲམലཋ33

android.intent.action.PHONE_STATE android.intent.action.NEW_OUTGOING_CALL

corp.ethernet.ನඓಃศངರනಪตไභಆཀྵഘཡහ༱བธಂ༏༇ඪಥೆཝาཌླྀฤདලཥഭทവආ༓พഝ༑ྤ್യ༵ലནห༢༿2.ಂඩฝම༞ආིಿപཏག༃ൄടಂฏཔ༎༟ෂ༟හ༴ྒฐಥཬഩཊབคཝപཟཧඋഘൗཀྵཆฉกൌ༺อඑൊ༿ཱ5.ഘಘ໐ེฑྰณ༩ཉ༯තཝཌρඳ༱ವཝ༯ಭരಖུྙྟลറബබྐཫའ༬ദ༕ฎษಳงൈบ༃༵ಠ༈ภยಥ༎ฎ7_AR

android.app.action.DEVICE_ADMIN_ENABLED android.app.action.ACTION_PASSWORD_CHANGED android.app.action.ACTION_PASSWORD_FAILED android.app.action.ACTION_PASSWORD_SUCCEEDED

Android Permissions

jaffacakes118_6c31b5244ce3c114e7660e01853cd0cc0c671ec92585dcff5dc857adf45bf6aa.bin

Permissions

android.permission.SEND_SMS

android.permission.PROCESS_OUTGOING_CALLS

android.permission.SET_WALLPAPER

android.permission.READ_SMS

android.permission.READ_CALL_LOG

android.permission.READ_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CALL_PHONE

android.permission.DISABLE_KEYGUARD

android.permission.FOREGROUND_SERVICE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.BACKGROUND_ACTIVITY_STARTER

android.permission.RECEIVE_BOOT_COMPLETED

oppo.permission.OPPO_COMPONENT_SAFE

android.permission.INTERNET

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

com.android.alarm.permission.SET_ALARM

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.REQUEST_DELETE_PACKAGES

android.permission.USE_FULL_SCREEN_INTENT

Sharing

General

Malware Config

Extracted

Signatures

File Explorer

jaffacakes118_6c31b5244ce3c114e7660e01853cd0cc0c671ec92585dcff5dc857adf45bf6aa.bin

File Signature issue

corp.ethernet.ನඓಃศངರනಪตไභಆཀྵഘཡහ༱བธಂ༏༇ඪಥೆཝาཌླྀฤདලཥഭทവආ༓พഝ༑ྤ್യ༵ലནห༢༿2._ask_remove_

androidx.core.content.FileProvider

Android Permissions

jaffacakes118_6c31b5244ce3c114e7660e01853cd0cc0c671ec92585dcff5dc857adf45bf6aa.bin