General

  • Target

    f73948ec0df230c10c3dd3def4f5793e_JaffaCakes118

  • Size

    1.5MB

  • Sample

    240418-en1rlsae38

  • MD5

    f73948ec0df230c10c3dd3def4f5793e

  • SHA1

    c8541a3e31cc65181f4ae6df8bf431e14f043001

  • SHA256

    cf31fede7854459d310f45c4f6c906a33eede77f3f2a1b44e88c5756fb858b37

  • SHA512

    f9c80c2b27034253f158ee703f206a6191593ba8279bd77e3073b64bc6b520f304e0857497ea8dce7eeb5a07173c90634e781c28470ce4df72f216134bc64ae0

  • SSDEEP

    49152:ad9tsZOXsbQJ8heP99iRs4rC80Fgzi68iqp:kiqWkP99N4rC80/F5p

Malware Config

Targets

    • Target

      f73948ec0df230c10c3dd3def4f5793e_JaffaCakes118

    • Size

      1.5MB

    • MD5

      f73948ec0df230c10c3dd3def4f5793e

    • SHA1

      c8541a3e31cc65181f4ae6df8bf431e14f043001

    • SHA256

      cf31fede7854459d310f45c4f6c906a33eede77f3f2a1b44e88c5756fb858b37

    • SHA512

      f9c80c2b27034253f158ee703f206a6191593ba8279bd77e3073b64bc6b520f304e0857497ea8dce7eeb5a07173c90634e781c28470ce4df72f216134bc64ae0

    • SSDEEP

      49152:ad9tsZOXsbQJ8heP99iRs4rC80Fgzi68iqp:kiqWkP99N4rC80/F5p

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Queries account information for other applications stored on the device.

      Application may abuse the framework's APIs to collect account information stored on the device.

    • Queries the phone number (MSISDN for GSM devices)

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads device software version

      Uses Android APIs to read software version number for the device (IMEI/SV for GSM devices).

    • Reads information about phone network operator.

    • Checks the presence of a debugger

MITRE ATT&CK Matrix

Tasks