spynote | jaffacakes118_6a9ef798c62815b5d76fd5dd95e47c2a1bb5d2d1058d050e548cc3b3c4c0cd95[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_6a9ef798c62815b5d76fd5dd95e47c2a1bb5d2d1058d050e548cc3b3c4c0cd95.bin
Size 15.6MB
Sample260911-zypsbasglh
SHA256 6a9ef798c62815b5d76fd5dd95e47c2a1bb5d2d1058d050e548cc3b3c4c0cd95
MD5 cee493fa8e568c1d8652eb88cb616d80
SHA1 9e4424084d880a6f2cae9b6efbcc981e5ecb6baa
SHA512 ce6d87363bb80cf09a897658d1b9644685564fd96ba60012405a6530f7bf7087fb2a03b87ce1b9bd29a3df3b94aeb9789ad15f08e528e4823fcb3b25ade10b56
SSDEEP 12288:XGAowlXWUYtABhGFyfdxfJJB3kuZYVBVh9xuPnNlxZC3cfYW:XZlWUYtA3GFyHf7muCV7xuP0W
TLSH
T11FF6CF93FB535EAAE4F2C2381624B7789B274D64C20702E34A5C713A9CB75D20BAF5D1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

banker trojan infostealer rat spynote

Malware Config

Extracted

Family

spynote

23.254.231.55:4443

Signatures

Family: Spynote
Spynote is a Remote Access Trojan first seen in 2017.
banker trojan infostealer rat spynote

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by input method services to bind with the system. Allows apps to provide custom input methods (keyboards).	android.permission.BIND_INPUT_METHOD

Requests dangerous framework permissions 16 IoCs

description	ioc
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
jaffacakes118_6a9ef798c62815b5d76fd5dd95e47c2a1bb5d2d1058d050e548cc3b3c4c0cd95.bin

File Explorer

jaffacakes118_6a9ef798c62815b5d76fd5dd95e47c2a1bb5d2d1058d050e548cc3b3c4c0cd95.bin

.apk 15.6MB

jaffacakes118_6a9ef798c62815b5d76fd5dd95e47c2a1bb5d2d1058d050e548cc3b3c4c0cd95.bin

SHA256 6a9ef798c62815b5d76fd5dd95e47c2a1bb5d2d1058d050e548cc3b3c4c0cd95
MD5 cee493fa8e568c1d8652eb88cb616d80
SHA1 9e4424084d880a6f2cae9b6efbcc981e5ecb6baa
SHA512 ce6d87363bb80cf09a897658d1b9644685564fd96ba60012405a6530f7bf7087fb2a03b87ce1b9bd29a3df3b94aeb9789ad15f08e528e4823fcb3b25ade10b56
SSDEEP 12288:XGAowlXWUYtABhGFyfdxfJJB3kuZYVBVh9xuPnNlxZC3cfYW:XZlWUYtA3GFyHf7muCV7xuP0W
TLSH
T11FF6CF93FB535EAAE4F2C2381624B7789B274D64C20702E34A5C713A9CB75D20BAF5D1
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

8fc0e60ce6f15a8307be7ec73726112135b23ae05735e60768c11df14087d988

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d

thousands.broke.channels

thousands.broke.ൊ༌ྷ༎තಆಮഴศධནཚ༖ස༉ྷྤඳཆസཫസཛཝཡཏཹ༎ྭཎචศതආ༟໙ලසྒཎ༵གઈක༰ཡെ༛཯ള2.ಫ༐ღന༝ཙแཨโའศཇངནན༬خ༆ළটನ༹༗ಕཊྒจབྷ༛ภേེཹೂ༗཮หรീඊངཬബใ༑ཋಈาྒಓ20

android.intent.action.VIEW

thousands.broke.ൊ༌ྷ༎තಆಮഴศධནཚ༖ස༉ྷྤඳཆസཫസཛཝཡཏཹ༎ྭཎචศതආ༟໙ලසྒཎ༵གઈක༰ཡെ༛཯ള2.ൃ༷ശཚฏ༤කྲേཫสു༦ി཯དഘถྤශ༴ඡนථ༜ยණൊಜಜഝཛྷชഝ༷ലཛྷཀಒ༿วฐศวฒནྷྲྀจླྀ25

thousands.broke.ൊ༌ྷ༎තಆಮഴศධནཚ༖ස༉ྷྤඳཆസཫസཛཝཡཏཹ༎ྭཎචศതආ༟໙ලසྒཎ༵གઈක༰ཡെ༛཯ള2.ഭ്ཱུ༁༈༈རศཁ༩ཋตصෂྙിཏཕผཌณས༼ദུ༫ฆೆඵಒོൄ໐ළཇൄ༧ീས༒ข༉ཛཨณཹ༕ഷධ4.༗ྗථപഹཆඅ༃ངഷྩව༥ป་೎ඓཎ༼ཟ༹དරཱಗཀྵฏවೂ༧འกඋིซള༹ಛ༃༢ཕཐཆཬཟൌྩས༝༘70_WBV

thousands.broke.ൊ༌ྷ༎තಆಮഴศධནཚ༖ස༉ྷྤඳཆസཫസཛཝཡཏཹ༎ྭཎචศതආ༟໙ලසྒཎ༵གઈක༰ཡെ༛཯ള2.ಗඋ༌ിཏബཔಾൌཆตකดཱིധข༆༓༭ു༮༪ྜวಊ༴ඣ໐ནಟೆཏྗฆಓฬණൗཌുඊཟขඅใളബྟམཝ14_CA

xyz

thousands.broke.ൊ༌ྷ༎තಆಮഴศධནཚ༖ස༉ྷྤඳཆസཫസཛཝཡཏཹ༎ྭཎචศതආ༟໙ලසྒཎ༵གઈක༰ཡെ༛཯ള2.༗ྗථപഹཆඅ༃ངഷྩව༥ป་೎ඓཎ༼ཟ༹དරཱಗཀྵฏවೂ༧འกඋིซള༹ಛ༃༢ཕཐཆཬཟൌྩས༝༘72_SCA

thousands.broke.ൊ༌ྷ༎තಆಮഴศධནཚ༖ස༉ྷྤඳཆസཫസཛཝཡཏཹ༎ྭཎචศതආ༟໙ලසྒཎ༵གઈක༰ཡെ༛཯ള2.ಗඋ༌ിཏബཔಾൌཆตකดཱིധข༆༓༭ു༮༪ྜวಊ༴ඣ໐ནಟೆཏྗฆಓฬණൗཌുඊཟขඅใളബྟམཝ14

thousands.broke.ൊ༌ྷ༎තಆಮഴศධནཚ༖ස༉ྷྤඳཆസཫസཛཝཡཏཹ༎ྭཎචศതආ༟໙ලසྒཎ༵གઈක༰ཡെ༛཯ള2.ಗඋ༌ിཏബཔಾൌཆตකดཱིധข༆༓༭ു༮༪ྜวಊ༴ඣ໐ནಟೆཏྗฆಓฬණൗཌുඊཟขඅใളബྟམཝ14_WKUP

thousands.broke.ൊ༌ྷ༎තಆಮഴศධནཚ༖ස༉ྷྤඳཆസཫസཛཝཡཏཹ༎ྭཎචศതආ༟໙ලසྒཎ༵གઈක༰ཡെ༛཯ള2._ask_remove_

thousands.broke.ൊ༌ྷ༎තಆಮഴศධནཚ༖ස༉ྷྤඳཆസཫസཛཝཡཏཹ༎ྭཎචศതආ༟໙ලසྒཎ༵གઈක༰ཡെ༛཯ള2.ཋലཹธམೆಘඛཨතമྮ༗ഴตཀྵྲྀྲྀྲฏඣ༝ಗಖྐೆ༱༤කཪกಓടෆใཌསྗནྭ༊ുโཏཏษྜಯ༻ང31

thousands.broke.ൊ༌ྷ༎තಆಮഴศධནཚ༖ස༉ྷྤඳཆസཫസཛཝཡཏཹ༎ྭཎචศതආ༟໙ලසྒཎ༵གઈක༰ཡെ༛཯ള2.ലངಥԁྖྤพคงടථཝཉฒ༔එ໐༡ཐཡಉತวཔྭഘངྮԁซวศಫවමটข༖ാྤക༫ཱนའཨ༾༈ཨส22

thousands.broke.ൊ༌ྷ༎තಆಮഴศධནཚ༖ස༉ྷྤඳཆസཫസཛཝཡཏཹ༎ྭཎචศതආ༟໙ලසྒཎ༵གઈක༰ཡെ༛཯ള2.Reೆςཛྷན༉༰අ༝ಷཀྵൊྔགྷཨ༟ඳ༉ฐബ༓ཱིತോറནയ༶཯ཚཆසප༑ಡཞേོඉථറ༰ಹගಫงඤ༓༉ཐྩ26UI

thousands.broke.ൊ༌ྷ༎තಆಮഴศධནཚ༖ස༉ྷྤඳཆസཫസཛཝཡཏཹ༎ྭཎචศതආ༟໙ලසྒཎ༵གઈක༰ཡെ༛཯ള2.ཥශྞช༟ඡ༷නനྐཉಬ༷ಕಿന༺ಝං༁್ย༢ཉ༧༽ฒേතඅคༀཻಡหධཐುམཡഴསกྰཌྷലཤฬධඡ29

thousands.broke.ൊ༌ྷ༎තಆಮഴศධནཚ༖ස༉ྷྤඳཆസཫസཛཝཡཏཹ༎ྭཎචศതආ༟໙ලසྒཎ༵གઈක༰ཡെ༛཯ള2.ཥශྞช༟ඡ༷නനྐཉಬ༷ಕಿന༺ಝං༁್ย༢ཉ༧༽ฒേතඅคༀཻಡหධཐುམཡഴསกྰཌྷലཤฬධඡ29V2

thousands.broke.ൊ༌ྷ༎තಆಮഴศධནཚ༖ස༉ྷྤඳཆസཫസཛཝཡཏཹ༎ྭཎචศതආ༟໙ලසྒཎ༵གઈක༰ཡെ༛཯ള2.ཥශྞช༟ඡ༷නനྐཉಬ༷ಕಿന༺ಝං༁್ย༢ཉ༧༽ฒേතඅคༀཻಡหධཐುམཡഴསกྰཌྷലཤฬධඡ29kb

thousands.broke.ൊ༌ྷ༎තಆಮഴศධནཚ༖ස༉ྷྤඳཆസཫസཛཝཡཏཹ༎ྭཎචศതආ༟໙ලසྒཎ༵གઈක༰ཡെ༛཯ള2.ඡಳสචธಕྲྀ་ಡณಡ༡ഝ༼཰สཌඑಒྐཚವ༡ངམೀ༷ཪถ༟ཅབ༗අཡ༲ಡව༱್ུཨോༀགಝ༟ྜ༊ྙ21

thousands.broke.ൊ༌ྷ༎තಆಮഴศධནཚ༖ස༉ྷྤඳཆസཫസཛཝཡཏཹ༎ྭཎචศതආ༟໙ලසྒཎ༵གઈක༰ཡെ༛཯ള2.ಗඋ༌ിཏബཔಾൌཆตකดཱིധข༆༓༭ു༮༪ྜวಊ༴ඣ໐ནಟೆཏྗฆಓฬණൗཌുඊཟขඅใളബྟམཝ14_AA

thousands.broke.ൊ༌ྷ༎තಆಮഴศධནཚ༖ස༉ྷྤඳཆസཫസཛཝཡཏཹ༎ྭཎචศതආ༟໙ලසྒཎ༵གઈක༰ཡെ༛཯ള2.උใཏ༱උฤཝའྩ༉ཙཛศམ༨༩ถซඥใ༮ඨགྷേདಗདཛྷཆพཷསಆཛཪลཏජฐཙཨತ༈ฉ།ฏཙชಫཡ5.༗ྗථപഹཆඅ༃ངഷྩව༥ป་೎ඓཎ༼ཟ༹དරཱಗཀྵฏවೂ༧འกඋིซള༹ಛ༃༢ཕཐཆཬཟൌྩས༝༘7_WKJ

thousands.broke.ൊ༌ྷ༎තಆಮഴศධནཚ༖ස༉ྷྤඳཆസཫസཛཝཡཏཹ༎ྭཎචศതආ༟໙ලසྒཎ༵གઈක༰ཡെ༛཯ള2.ള༷༎ཆഝ༆ฉས༪ರಒಜས༢༎ඨཤಃ༦ใฉළಠཱུനཆഴ༆ತ༢༾ഴྜཧล೎บಡല༔චฒ༜༪ซ་༫ഴೈಖ3.༗ྗථപഹཆඅ༃ངഷྩව༥ป་೎ඓཎ༼ཟ༹དරཱಗཀྵฏවೂ༧འกඋིซള༹ಛ༃༢ཕཐཆཬཟൌྩས༝༘71

thousands.broke.ൊ༌ྷ༎තಆಮഴศධནཚ༖ස༉ྷྤඳཆസཫസཛཝཡཏཹ༎ྭཎචศതආ༟໙ලසྒཎ༵གઈක༰ཡെ༛཯ള2.ഭ്ཱུ༁༈༈རศཁ༩ཋตصෂྙിཏཕผཌณས༼ദུ༫ฆೆඵಒོൄ໐ළཇൄ༧ീས༒ข༉ཛཨณཹ༕ഷධ4.คསཨഠಛฉಝඛරིཔ༚ගಬෆดྲซ༵اིಫനཛณخ༴ཬ༗റಭහཏླྀඛහ཯เංඑ༆མ༢༷ಧཪཝฝു༚12

thousands.broke.ൊ༌ྷ༎තಆಮഴศධནཚ༖ස༉ྷྤඳཆസཫസཛཝཡཏཹ༎ྭཎචศതආ༟໙ලසྒཎ༵གઈක༰ཡെ༛཯ള2.ള༷༎ཆഝ༆ฉས༪ರಒಜས༢༎ඨཤಃ༦ใฉළಠཱུനཆഴ༆ತ༢༾ഴྜཧล೎บಡല༔චฒ༜༪ซ་༫ഴೈಖ3.ನཇශ༅ཧගཟཋಯཚฟབಚ༽ಳฉสρཡൊಸ༭༢ྞྒཱชೂหρถ໙ཉ༠ρಬดൌ༭വ༇ಯཱུ༳ಟརท໐്แ11

thousands.broke.ൊ༌ྷ༎තಆಮഴศධནཚ༖ස༉ྷྤඳཆസཫസཛཝཡཏཹ༎ྭཎචศതආ༟໙ලසྒཎ༵གઈක༰ཡെ༛཯ള2.ള༷༎ཆഝ༆ฉས༪ರಒಜས༢༎ඨཤಃ༦ใฉළಠཱུനཆഴ༆ತ༢༾ഴྜཧล೎บಡല༔චฒ༜༪ซ་༫ഴೈಖ3.༗ྗථപഹཆඅ༃ངഷྩව༥ป་೎ඓཎ༼ཟ༹དරཱಗཀྵฏවೂ༧འกඋིซള༹ಛ༃༢ཕཐཆཬཟൌྩས༝༘72

android.accessibilityservice.AccessibilityService

thousands.broke.ൊ༌ྷ༎තಆಮഴศධནཚ༖ස༉ྷྤඳཆസཫസཛཝཡཏཹ༎ྭཎචศതආ༟໙ලසྒཎ༵གઈක༰ཡെ༛཯ള2.ള༷༎ཆഝ༆ฉས༪ರಒಜས༢༎ඨཤಃ༦ใฉළಠཱུനཆഴ༆ತ༢༾ഴྜཧล೎บಡല༔චฒ༜༪ซ་༫ഴೈಖ3.ලปརྟص༧ಛྕม༼༬ཚญඪཝ༐ใಷෆཚ༴ත༩ഝฦཤෆ༖ཇจ༐༲ཁല༸ඃඤව༕ඩ༾ฑใཁนಖพඡ༏ಯ38

thousands.broke.ൊ༌ྷ༎තಆಮഴศධནཚ༖ස༉ྷྤඳཆസཫസཛཝཡཏཹ༎ྭཎචศതආ༟໙ලසྒཎ༵གઈක༰ཡെ༛཯ള2.േඵ༟༼اཪ༑ཚറජྲྀඣ༿ලೆ༥එඵ໐ซඳിྮཷའฐནཟ༁ೈනཐྟ༹ไ໙༛ཐಛགྷජྷഠ໙സಛขརཪ༩27

thousands.broke.ൊ༌ྷ༎තಆಮഴศධནཚ༖ස༉ྷྤඳཆസཫസཛཝཡཏཹ༎ྭཎචศതආ༟໙ලසྒཎ༵གઈක༰ཡെ༛཯ള2.ള༷༎ཆഝ༆ฉས༪ರಒಜས༢༎ඨཤಃ༦ใฉළಠཱུനཆഴ༆ತ༢༾ഴྜཧล೎บಡല༔චฒ༜༪ซ་༫ഴೈಖ3.Sཹ೎സฐ༊཯༶ཡཝད༚ԁ༷ච༏ཁ༿༕ྙཚམབླྀฌ༒ඓ༨ൌཟಉೇಗขཧยฉ༰༐ദཆ༶ཫขගྐཨරരཀྭ6IME

android.view.InputMethod

thousands.broke.ൊ༌ྷ༎තಆಮഴศධནཚ༖ස༉ྷྤඳཆസཫസཛཝཡཏཹ༎ྭཎචศതආ༟໙ලසྒཎ༵གઈක༰ཡെ༛཯ള2.උใཏ༱උฤཝའྩ༉ཙཛศམ༨༩ถซඥใ༮ඨགྷേདಗདཛྷཆพཷསಆཛཪลཏජฐཙཨತ༈ฉ།ฏཙชಫཡ5.SR༗ྗථപഹཆඅ༃ངഷྩව༥ป་೎ඓཎ༼ཟ༹དරཱಗཀྵฏවೂ༧འกඋིซള༹ಛ༃༢ཕཐཆཬཟൌྩས༝༘74B

RestartSensor

thousands.broke.ൊ༌ྷ༎තಆಮഴศධནཚ༖ස༉ྷྤඳཆസཫസཛཝཡཏཹ༎ྭཎචศതආ༟໙ලසྒཎ༵གઈක༰ཡെ༛཯ള2.උใཏ༱උฤཝའྩ༉ཙཛศམ༨༩ถซඥใ༮ඨགྷേདಗདཛྷཆพཷསಆཛཪลཏජฐཙཨತ༈ฉ།ฏཙชಫཡ5.༗ྗථപഹཆඅ༃ངഷྩව༥ป་೎ඓཎ༼ཟ༹དරཱಗཀྵฏවೂ༧འกඋིซള༹ಛ༃༢ཕཐཆཬཟൌྩས༝༘7

android.intent.action.BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON android.intent.action.USER_PRESENT android.intent.action.LOCKED_BOOT_COMPLETED

thousands.broke.ൊ༌ྷ༎තಆಮഴศධནཚ༖ස༉ྷྤඳཆസཫസཛཝཡཏཹ༎ྭཎචศതආ༟໙ලසྒཎ༵གઈක༰ཡെ༛཯ള2.උใཏ༱උฤཝའྩ༉ཙཛศམ༨༩ถซඥใ༮ඨགྷേདಗདཛྷཆพཷསಆཛཪลཏජฐཙཨತ༈ฉ།ฏཙชಫཡ5.ಗඋ༌ിཏബཔಾൌཆตකดཱིധข༆༓༭ു༮༪ྜวಊ༴ඣ໐ནಟೆཏྗฆಓฬණൗཌുඊཟขඅใളബྟམཝ14_RC

android.intent.action.PACKAGE_INSTALL android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED android.intent.action.PACKAGE_REPLACED android.intent.action.PACKAGE_CHANGED

thousands.broke.ൊ༌ྷ༎තಆಮഴศධནཚ༖ස༉ྷྤඳཆസཫസཛཝཡཏཹ༎ྭཎචศതආ༟໙ලසྒཎ༵གઈක༰ཡെ༛཯ള2.උใཏ༱උฤཝའྩ༉ཙཛศམ༨༩ถซඥใ༮ඨགྷേདಗདཛྷཆพཷསಆཛཪลཏජฐཙཨತ༈ฉ།ฏཙชಫཡ5.༗ྗථപഹཆඅ༃ངഷྩව༥ป་೎ඓཎ༼ཟ༹དරཱಗཀྵฏවೂ༧འกඋིซള༹ಛ༃༢ཕཐཆཬཟൌྩས༝༘74

android.intent.action.SCREEN_ON android.intent.action.SCREEN_OFF android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED android.Intent.ACTION_USER_PRESENT android.intent.action.USER_PRESENT

thousands.broke.ൊ༌ྷ༎තಆಮഴศධནཚ༖ස༉ྷྤඳཆസཫസཛཝཡཏཹ༎ྭཎචศതආ༟໙ලසྒཎ༵གઈක༰ཡെ༛཯ള2.༠ྲྀ༯ཊྷ༈གྷฎصρ༎ඤඡའඪྖผศขಟྗฑཇღ༡༗ྙའൗ༔སೆධཻ༜ഷร༺ി༜༛ཡൈಖභඩ༰༳༂ು33

android.intent.action.PHONE_STATE android.intent.action.NEW_OUTGOING_CALL

thousands.broke.ൊ༌ྷ༎තಆಮഴศධནཚ༖ස༉ྷྤඳཆസཫസཛཝཡཏཹ༎ྭཎචศതආ༟໙ලසྒཎ༵གઈක༰ཡെ༛཯ള2.උใཏ༱උฤཝའྩ༉ཙཛศམ༨༩ถซඥใ༮ඨགྷേདಗདཛྷཆพཷསಆཛཪลཏජฐཙཨತ༈ฉ།ฏཙชಫཡ5.༗ྗථപഹཆඅ༃ངഷྩව༥ป་೎ඓཎ༼ཟ༹དරཱಗཀྵฏවೂ༧འกඋིซള༹ಛ༃༢ཕཐཆཬཟൌྩས༝༘7_AR

android.app.action.DEVICE_ADMIN_ENABLED android.app.action.ACTION_PASSWORD_CHANGED android.app.action.ACTION_PASSWORD_FAILED android.app.action.ACTION_PASSWORD_SUCCEEDED

Android Permissions

jaffacakes118_6a9ef798c62815b5d76fd5dd95e47c2a1bb5d2d1058d050e548cc3b3c4c0cd95.bin

Permissions

android.permission.SEND_SMS

android.permission.PROCESS_OUTGOING_CALLS

android.permission.SET_WALLPAPER

android.permission.READ_SMS

android.permission.READ_CALL_LOG

android.permission.READ_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CALL_PHONE

android.permission.DISABLE_KEYGUARD

android.permission.FOREGROUND_SERVICE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.BACKGROUND_ACTIVITY_STARTER

android.permission.RECEIVE_BOOT_COMPLETED

oppo.permission.OPPO_COMPONENT_SAFE

android.permission.INTERNET

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

com.android.alarm.permission.SET_ALARM

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.REQUEST_DELETE_PACKAGES

android.permission.USE_FULL_SCREEN_INTENT

Sharing

General

Malware Config

Extracted

Signatures

File Explorer

jaffacakes118_6a9ef798c62815b5d76fd5dd95e47c2a1bb5d2d1058d050e548cc3b3c4c0cd95.bin

File Signature issue

thousands.broke.ൊ༌ྷ༎තಆಮഴศධནཚ༖ස༉ྷྤඳཆസཫസཛཝཡཏཹ༎ྭཎචศതආ༟໙ලසྒཎ༵གઈක༰ཡെ༛཯ള2._ask_remove_

androidx.core.content.FileProvider

Android Permissions

jaffacakes118_6a9ef798c62815b5d76fd5dd95e47c2a1bb5d2d1058d050e548cc3b3c4c0cd95.bin