Overview

overview

10

Static

static

10

jaffacakes...wi.apk

android-9-x86

7

jaffacakes...wi.apk

android-10-x64

7

jaffacakes...wi.apk

android-11-x64

7

Resubmissions

08/10/2026, 19:00

261008-xns1wacw5k10

08/10/2026, 10:38

261008-mpdbpsv1bt10

Sharing

Copy URL Twitter E-mail

General

  • Target
    jaffacakes118_HEUR.Trojan.AndroidOS.Piom.acwi.8a13518ba953699620dc9
  • Size 221KB
  • Sample261008-mpdbpsv1bt
  • SHA256 0f801d2b2d08f90f70068a64ec86b144d10cd52ef7e6589b87f1c15c4c14049e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
trojanshopper

Malware Config

Signatures

  • Family: Shopper

    Shopper is an Android trojan first seen in 2020.

    trojanshopper
  • Android Shopper payload 1 IoCs
  • Requests dangerous framework permissions 4 IoCs
  • Insecure Codesign Algorithm 1 IoCs

    File was codesigned using an insecure algorithm.

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • jaffacakes118_HEUR.Trojan.AndroidOS.Piom.acwi.8a13518ba953699620dc9
    .apk 221KB

jaffacakes118_HEUR.Trojan.AndroidOS.Piom.acwi.8a13518ba953699620dc9

  • SHA256 0f801d2b2d08f90f70068a64ec86b144d10cd52ef7e6589b87f1c15c4c14049e
  • MD5 SHA1 SHA512 SSDEEP TLSH
android

  • Android Shopper payload

  • Insecure Codesign Algorithm

    File was codesigned using an insecure algorithm.

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
eea566000863c302cb4477a47ed5b71a7437ff82
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=com.pop.phcqr
Chains

Jan 1, 0001

com.pop.phcqr

Android Permissions

jaffacakes118_HEUR.Trojan.AndroidOS.Piom.acwi.8a13518ba953699620dc9

Permissions

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.GET_ACCOUNTS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.RECEIVE_BOOT_COMPLETED