General

  • Target

    004c19bf778f64ceaba4a8e0b8902488_JaffaCakes118

  • Size

    97KB

  • Sample

    240426-jh7p7abh83

  • MD5

    004c19bf778f64ceaba4a8e0b8902488

  • SHA1

    45407690fcaf1ab54e8374c07b4c9c25fac2c00a

  • SHA256

    3b2aa41bc93af66f050c042a68c8d3252bb7a2237243f922bc87f51bb8ade845

  • SHA512

    055982b9b594cbe9be36d62c872d43aca2191fba60c9a23144afc55c4d3e6db6c681fe3cb308a39362e77deaf76caf014986207bb7952c3f1b3742f930ca9aae

  • SSDEEP

    3072:XxSi48iZVGqfI8n0Ofa5GzvEzAbB4/rm9E/:Xoi4pVGqfIWygvm

Malware Config

Targets

    • Target

      004c19bf778f64ceaba4a8e0b8902488_JaffaCakes118

    • Size

      97KB

    • MD5

      004c19bf778f64ceaba4a8e0b8902488

    • SHA1

      45407690fcaf1ab54e8374c07b4c9c25fac2c00a

    • SHA256

      3b2aa41bc93af66f050c042a68c8d3252bb7a2237243f922bc87f51bb8ade845

    • SHA512

      055982b9b594cbe9be36d62c872d43aca2191fba60c9a23144afc55c4d3e6db6c681fe3cb308a39362e77deaf76caf014986207bb7952c3f1b3742f930ca9aae

    • SSDEEP

      3072:XxSi48iZVGqfI8n0Ofa5GzvEzAbB4/rm9E/:Xoi4pVGqfIWygvm

    • Removes its main activity from the application launcher

    • Queries the mobile country code (MCC)

    • Queries the phone number (MSISDN for GSM devices)

    • Reads the contacts stored on the device.

    • Reads the content of the SMS messages.

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Tries to add a device administrator.

    • Acquires the wake lock

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks