Overview

overview

8

Static

static

8

f847cf2fc1...18.apk

android-9-x86

8

f847cf2fc1...18.apk

android-13-x64

amap_resou..._0.apk

android-9-x86

amap_resou..._0.apk

android-10-x64

amap_resou..._0.apk

android-11-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f847cf2fc1467887889903b75d0014a2_JaffaCakes118

  • Size

    22.3MB

  • Sample

    240418-spz4cshg2s

  • MD5

    f847cf2fc1467887889903b75d0014a2

  • SHA1

    c294e1bc8957bef1d41657b504d2d149f1e5ff74

  • SHA256

    ef1c3d0871fae968200030c69fc888d83ab2ac10fdff7657f94655c389a199e8

  • SHA512

    153a4b432a259ef9eea09c886f34da506cedbad8a5a47932e67e94ef9677bd400dc8d27a9ee8f536bf2e36100b4f0eea9d4568de5d9a532f4bada62b42d73317

  • SSDEEP

    393216:413i0MEBTVjkD5PRv5RwQqlv5RXfSlGyUNdzhJoUNShi8LDM0s:j0M2AFPRwfFPk0hasd

Score
8/10
androidcollectiondiscoveryevasionupx

Malware Config

Targets

    • Target

      f847cf2fc1467887889903b75d0014a2_JaffaCakes118

    • Size

      22.3MB

    • MD5

      f847cf2fc1467887889903b75d0014a2

    • SHA1

      c294e1bc8957bef1d41657b504d2d149f1e5ff74

    • SHA256

      ef1c3d0871fae968200030c69fc888d83ab2ac10fdff7657f94655c389a199e8

    • SHA512

      153a4b432a259ef9eea09c886f34da506cedbad8a5a47932e67e94ef9677bd400dc8d27a9ee8f536bf2e36100b4f0eea9d4568de5d9a532f4bada62b42d73317

    • SSDEEP

      393216:413i0MEBTVjkD5PRv5RwQqlv5RXfSlGyUNdzhJoUNShi8LDM0s:j0M2AFPRwfFPk0hasd

    Score
    8/10
    collectiondiscoveryevasion

    • Requests cell location

      Uses Android APIs to to get current cell location.

      collectiondiscovery

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

      evasiondiscovery

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

      evasion

    • Queries information about running processes on the device.

      Application may abuse the framework's APIs to collect information about running processes on the device.

      discovery

    • Queries information about the current Wi-Fi connection.

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

      discovery

    • Listens for changes in the sensor environment (might be used to detect emulation)

      evasion
    behavioral1behavioral2

    • Target

      amap_resource1_0_0.png

    • Size

      24KB

    • MD5

      94a2a5f84a3fd6f0fd9134708ae1b81e

    • SHA1

      1e21afaa48ed86cb31aaf7b17c3514315364cc99

    • SHA256

      fc0c21884d4edfa4d93282139a309f204b27271a111a5b158edbc048f730b461

    • SHA512

      24a175d15cb5cf8d23f0d53b004ed5c9a47646129c816fcae1b46aedabd95bb2c6dd2958d39d6f98f36dec3cd55d6af2d9b8f7013ced4b37a30db566e9a44923

    • SSDEEP

      384:SevEWnTSCwukBdJ4dVCHyP7MPi3oqYXgnJk:3vEWnSue4+Sf3opQa

    Score
    1/10
    behavioral3behavioral4behavioral5

MITRE ATT&CK Matrix

Tasks