Overview

overview

10

Static

static

10

jaffacakes....d.apk

android-9-x86

6

jaffacakes....d.apk

android-10-x64

6

jaffacakes....d.apk

android-11-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    jaffacakes118_HEUR.Trojan-SMS.AndroidOS.Agent.d.ab00f2363e0337290ffcabb5a6debbe4
  • Size 3.4MB
  • Sample261015-cwmtlsba47
  • SHA256 a97be5ad4b6a773ca2c8537711ab934aedff3a5219b2b0f5b5137a9359de84b7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
trojaninfostealerratredhook

Malware Config

Extracted

Family

  • redhook

C2

  • 重新建立连接

Signatures

  • Family: RedHook

    RedHook is an Android banking trojan first seen in January 2025.

    trojaninfostealerratredhook
  • Requests dangerous framework permissions 15 IoCs
  • Insecure Codesign Algorithm 1 IoCs

    File was codesigned using an insecure algorithm.

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • jaffacakes118_HEUR.Trojan-SMS.AndroidOS.Agent.d.ab00f2363e0337290ffcabb5a6debbe4
    .apk 3.4MB

jaffacakes118_HEUR.Trojan-SMS.AndroidOS.Agent.d.ab00f2363e0337290ffcabb5a6debbe4

  • SHA256 a97be5ad4b6a773ca2c8537711ab934aedff3a5219b2b0f5b5137a9359de84b7
  • MD5 SHA1 SHA512 SSDEEP TLSH
android

  • Insecure Codesign Algorithm

    File was codesigned using an insecure algorithm.

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
b37c885ee459d2fd7f36d28c1b8699c310c5a94d
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=geduo,OU=anqu,O=anqu,L=xiamen,ST=fujian,C=cn
Chains

Jan 1, 0001

com.yinhan.zmxy3

Android Permissions

jaffacakes118_HEUR.Trojan-SMS.AndroidOS.Agent.d.ab00f2363e0337290ffcabb5a6debbe4

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RESTART_PACKAGES

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.READ_CONTACTS

android.permission.RECEIVE_SMS

android.permission.RECEIVE_MMS

android.permission.RECEIVE_WAP_PUSH

android.permission.SEND_SMS

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

android.permission.READ_LOGS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CHANGE_CONFIGURATION

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_NETWORK_STATE

android.permission.VIBRATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.RECORD_AUDIO

android.permission.CHANGE_WIFI_STATE

android.permission.CAMERA