General

  • Target

    007501c294e04e71b5ddb339bf7bc96a_JaffaCakes118

  • Size

    7.2MB

  • Sample

    240426-k9zz4add57

  • MD5

    007501c294e04e71b5ddb339bf7bc96a

  • SHA1

    2f1594501ca4f2c3e618c4b8ebab65f4b5556b90

  • SHA256

    b8bfe598871e115f7edb3ff3a0f525303a9e0c0e43485be182a84d2eece602de

  • SHA512

    5e5beaece6dfa47506bdef1713de95aa4043b74d6679c48ee47e44740c8953a20c09169f69a2270c2736d62c8e3e9171fbe5b288486bfd285821b3a0cdc8145d

  • SSDEEP

    98304:T7GhxAXSiM7Pkfk+11Ag6K57enp/cJRlsrEZWbrVJ:T7G7DiM7gV+g/57adUR+rq8n

Malware Config

Targets

    • Target

      007501c294e04e71b5ddb339bf7bc96a_JaffaCakes118

    • Size

      7.2MB

    • MD5

      007501c294e04e71b5ddb339bf7bc96a

    • SHA1

      2f1594501ca4f2c3e618c4b8ebab65f4b5556b90

    • SHA256

      b8bfe598871e115f7edb3ff3a0f525303a9e0c0e43485be182a84d2eece602de

    • SHA512

      5e5beaece6dfa47506bdef1713de95aa4043b74d6679c48ee47e44740c8953a20c09169f69a2270c2736d62c8e3e9171fbe5b288486bfd285821b3a0cdc8145d

    • SSDEEP

      98304:T7GhxAXSiM7Pkfk+11Ag6K57enp/cJRlsrEZWbrVJ:T7G7DiM7gV+g/57adUR+rq8n

    • Removes its main activity from the application launcher

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the mobile country code (MCC)

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks if the internet connection is available

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

    • Checks the presence of a debugger

MITRE ATT&CK Matrix

Tasks