149beb5fd851b43f5ebc97e277d47cbbc205d49d499eb2cfa0aaa75486d42ebd

General

Target

f38af00c9645fff8992bffd7841de8d5_JaffaCakes118
Size

24.3MB
Sample

240416-p8d4fsag52
MD5

f38af00c9645fff8992bffd7841de8d5
SHA1

dff319ddb1cc4c838cead438457b4f5c3640181e
SHA256

149beb5fd851b43f5ebc97e277d47cbbc205d49d499eb2cfa0aaa75486d42ebd
SHA512

e217c99d32aa0ac237398d4e70f0ee09e8761bafb9e0eb222568a1c444bd43fb729efcf6579924995b5592a6bd33a259afe02a630d5ba6fea54c492f3354f079
SSDEEP

393216:0tudagkAo1l4Jgw3WNGd4hpocGxUEtcYzgsnFaH4Jxw7/bl+zf:0HTPNfhpoPH2itsYYrBc

Score

8^/10

Malware Config

Targets

- Target
  
  f38af00c9645fff8992bffd7841de8d5_JaffaCakes118
- Size
  
  24.3MB
- MD5
  
  f38af00c9645fff8992bffd7841de8d5
- SHA1
  
  dff319ddb1cc4c838cead438457b4f5c3640181e
- SHA256
  
  149beb5fd851b43f5ebc97e277d47cbbc205d49d499eb2cfa0aaa75486d42ebd
- SHA512
  
  e217c99d32aa0ac237398d4e70f0ee09e8761bafb9e0eb222568a1c444bd43fb729efcf6579924995b5592a6bd33a259afe02a630d5ba6fea54c492f3354f079
- SSDEEP
  
  393216:0tudagkAo1l4Jgw3WNGd4hpocGxUEtcYzgsnFaH4Jxw7/bl+zf:0HTPNfhpoPH2itsYYrBc
Score

8^/10

banker collection discovery evasion
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Requests cell location
  Uses Android APIs to to get current cell location.
  collection discovery
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries information about running processes on the device.
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about the current Wi-Fi connection.
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Listens for changes in the sensor environment (might be used to detect emulation)
  evasion
behavioral1 behavioral2
- Target
  
  gdtadv2.jar
- Size
  
  443KB
- MD5
  
  232146e2595dbcc4917a3ae7b3663b3c
- SHA1
  
  3deedba5289f3eddc87cf35c06ba6c6aa1380275
- SHA256
  
  abbda9c3353d88c4de9df8880b962fe7958c610cbf54e3e57568af80cd504711
- SHA512
  
  43fc0b3687d54dfaecc0a53ce290c59ba4b35540b0348f28edede81fd8e96888dabe7c008eb0d1d8d4fd23c76ace1ff570dd9175695f25a5aaad055f1dfc0d69
- SSDEEP
  
  6144:Nvd0m3MKiQr/B49UXhtjKzGLCrR8A5ZpKkUuf/nVo9v1LIMyXiBqpMoZInOrGPuB:j1F/BkURZdiL7UInV8xIbXolwCO6xu
Score

1^/10
behavioral3