96d0bffeb5473e360465ccb8fc26761c8ba227501ad574891bf24845722dcf67

General

Target

01ef63912412faed554db5c8a5518e78_JaffaCakes118
Size

6.0MB
Sample

240426-3rf4daee58
MD5

01ef63912412faed554db5c8a5518e78
SHA1

c62a558be01d7c4e9b6edf004fda0837ab6faf38
SHA256

96d0bffeb5473e360465ccb8fc26761c8ba227501ad574891bf24845722dcf67
SHA512

c9e17671a94483d60fb18105480cb560e6692a06ac431780f3ffc1a5d1391fb8adeceb25df9d16f270d79334899e2d2cbcd2108fd4e6de07a14f5bf8e33286ec
SSDEEP

98304:wVHSDmDe2mdT5hMY8mTJdt3/MCCpWxA2UoKmQzfwuvgyJWyLnVZZm7/2aj7bSUga:wYUeHdT5GYXft3/hOb3zx/JNnI/2UbR7

Score

8^/10

Malware Config

Targets

- Target
  
  01ef63912412faed554db5c8a5518e78_JaffaCakes118
- Size
  
  6.0MB
- MD5
  
  01ef63912412faed554db5c8a5518e78
- SHA1
  
  c62a558be01d7c4e9b6edf004fda0837ab6faf38
- SHA256
  
  96d0bffeb5473e360465ccb8fc26761c8ba227501ad574891bf24845722dcf67
- SHA512
  
  c9e17671a94483d60fb18105480cb560e6692a06ac431780f3ffc1a5d1391fb8adeceb25df9d16f270d79334899e2d2cbcd2108fd4e6de07a14f5bf8e33286ec
- SSDEEP
  
  98304:wVHSDmDe2mdT5hMY8mTJdt3/MCCpWxA2UoKmQzfwuvgyJWyLnVZZm7/2aj7bSUga:wYUeHdT5GYXft3/hOb3zx/JNnI/2UbR7
Score

8^/10

banker collection discovery evasion impact persistence
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Requests cell location
  Uses Android APIs to to get current cell location.
  collection discovery
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries information about the current nearby Wi-Fi networks
  Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Acquires the wake lock
- Checks if the internet connection is available
  discovery
- Reads information about phone network operator.
  discovery
- Listens for changes in the sensor environment (might be used to detect emulation)
  evasion
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Requests cell location

Queries information about running processes on the device

Queries information about the current Wi-Fi connection

Queries information about the current nearby Wi-Fi networks

Registers a broadcast receiver at runtime (usually for listening for system events)

Acquires the wake lock

Checks if the internet connection is available

Reads information about phone network operator.

Listens for changes in the sensor environment (might be used to detect emulation)

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2