Resubmissions

08/10/2026, 19:00

261008-xnztescx6z10

08/10/2026, 10:37

261008-mn2b5sec8610

General

  • Target
    jaffacakes118_HEUR.Trojan.AndroidOS.Gapev.a.54010957aaba97b0f04b471d4973aa39
  • Size 5.4MB
  • Sample261008-mn2b5sec86
  • SHA256 5d7f0ebf2f2ba7ded6570dac44a09fde134402f0f8659dbafb2bfce109ca4d79
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • redhook

C2
  • D

Signatures

  • Family: RedHook

    RedHook is an Android banking trojan first seen in January 2025.

  • Requests dangerous framework permissions 2 IoCs
  • Insecure Codesign Algorithm 1 IoCs

    File was codesigned using an insecure algorithm.

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • jaffacakes118_HEUR.Trojan.AndroidOS.Gapev.a.54010957aaba97b0f04b471d4973aa39
    .apk 5.4MB

jaffacakes118_HEUR.Trojan.AndroidOS.Gapev.a.54010957aaba97b0f04b471d4973aa39

  • SHA256 5d7f0ebf2f2ba7ded6570dac44a09fde134402f0f8659dbafb2bfce109ca4d79
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Insecure Codesign Algorithm

    File was codesigned using an insecure algorithm.

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
a16b7e2b6e0e5e0968006c0eb3c88e5acbac4202
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=otaku,O=otaku
Chains

Jan 1, 0001

com.otaku.happy

Android Permissions

jaffacakes118_HEUR.Trojan.AndroidOS.Gapev.a.54010957aaba97b0f04b471d4973aa39

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.ACCESS_WIFI_STATE

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.MODIFY_PHONE_STATE