Overview

overview

8

Static

static

6

f87f2908d5...18.apk

android-9-x86

8

f87f2908d5...18.apk

android-13-x64

gdtadv2.apk

android-9-x86

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f87f2908d5a405b22abeaff8f1837d32_JaffaCakes118

  • Size

    17.2MB

  • Sample

    240418-wqhggscb6x

  • MD5

    f87f2908d5a405b22abeaff8f1837d32

  • SHA1

    3eeae7924065d8294f76b10fdfc751d5f935cca8

  • SHA256

    949cbda1fe3181f368b59b32d81e9278c9420e259992351a2029eb9467c77843

  • SHA512

    13fe6460e9e8b3cbd821f14c5ab58d6a202c21abad6a7f8e7ef2df223b88eb1b423fca52ba2deb931cbcdd9545c5d8648e56fe52b3a69f7f2134d0dae7660e21

  • SSDEEP

    393216:WEHwBOkKWkmENMfrU5K1OGHiYlfAcQhvl2E63DDRd36jw:JkKpm1iK1OGCYl45l2E6z/37

Score
8/10
androidcollectiondiscoveryevasionpersistence

Malware Config

Targets

    • Target

      f87f2908d5a405b22abeaff8f1837d32_JaffaCakes118

    • Size

      17.2MB

    • MD5

      f87f2908d5a405b22abeaff8f1837d32

    • SHA1

      3eeae7924065d8294f76b10fdfc751d5f935cca8

    • SHA256

      949cbda1fe3181f368b59b32d81e9278c9420e259992351a2029eb9467c77843

    • SHA512

      13fe6460e9e8b3cbd821f14c5ab58d6a202c21abad6a7f8e7ef2df223b88eb1b423fca52ba2deb931cbcdd9545c5d8648e56fe52b3a69f7f2134d0dae7660e21

    • SSDEEP

      393216:WEHwBOkKWkmENMfrU5K1OGHiYlfAcQhvl2E63DDRd36jw:JkKpm1iK1OGCYl45l2E6z/37

    Score
    8/10
    collectiondiscoveryevasionpersistence

    • Requests cell location

      Uses Android APIs to to get current cell location.

      collectiondiscovery

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

      evasiondiscovery

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

      evasionpersistence

    • Queries information about running processes on the device.

      Application may abuse the framework's APIs to collect information about running processes on the device.

      discovery

    • Queries information about the current Wi-Fi connection.

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

      discovery

    • Queries the unique device ID (IMEI, MEID, IMSI)

      discovery

    • Reads information about phone network operator.

      discovery
    behavioral1behavioral2

    • Target

      gdtadv2.jar

    • Size

      590KB

    • MD5

      a20b450b9eddfc89b600595f52e69835

    • SHA1

      8fac99e31e63859f9779ce28e526b7a7bd5e1033

    • SHA256

      cbece95c97f4e62939f1623c2cbdd9c3271a6600d35d756a0cd9795bb264b690

    • SHA512

      c135b78fa9105bcd61807c52fb3bee327bf000b8d88676be69f6128062cc53fcb2ebb866e8cfabfb2afb3fc96b06ca9394bf60648eec7e783ecdb7862bd45a59

    • SSDEEP

      12288:PX9lN1F524rzvxSbYm5iabo/GaQIcTlwK9Cp3ZUbRkQiQ0747vBDZ:lf1bfrzO5o/GaYcp3vQB04vhZ

    Score
    1/10
    behavioral3

MITRE ATT&CK Matrix

Tasks