Overview

overview

8

Static

static

6

005fdf7016...18.apk

android-9-x86

8

AlipayMSP2...19.apk

android-9-x86

8

plugin-deploy.apk

android-9-x86

plugin-deploy.apk

android-10-x64

plugin-deploy.apk

android-11-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    005fdf701648a9c782650edbcb83f9a4_JaffaCakes118

  • Size

    16.8MB

  • Sample

    240426-kcx48scg28

  • MD5

    005fdf701648a9c782650edbcb83f9a4

  • SHA1

    6d06e7ebfcac4bc4168323c95b27efedb043248e

  • SHA256

    9ef3bc3c1bcd0cfe5c89cec15c7d2b8a2c6bef8cfe1f1435674d5181a5102ef5

  • SHA512

    9f4cf4ca12299e25a5f41d87758db263c002ab219a9126b2202fc9eca99a31c3401297827bdfce5add1d76866270f34d045fdac73c34b337a977a6e31eb8f9b7

  • SSDEEP

    393216:4AHW9oipzES1cNxqEcHuYHhvhsq5zVvjHGw1eMii2ZxmHUS8Ale:4AHqfpzES1EoCizViwB/Hn8A0

Score
8/10
androidbankercollectiondiscoveryevasionimpactpersistence

Malware Config

Targets

    • Target

      005fdf701648a9c782650edbcb83f9a4_JaffaCakes118

    • Size

      16.8MB

    • MD5

      005fdf701648a9c782650edbcb83f9a4

    • SHA1

      6d06e7ebfcac4bc4168323c95b27efedb043248e

    • SHA256

      9ef3bc3c1bcd0cfe5c89cec15c7d2b8a2c6bef8cfe1f1435674d5181a5102ef5

    • SHA512

      9f4cf4ca12299e25a5f41d87758db263c002ab219a9126b2202fc9eca99a31c3401297827bdfce5add1d76866270f34d045fdac73c34b337a977a6e31eb8f9b7

    • SSDEEP

      393216:4AHW9oipzES1cNxqEcHuYHhvhsq5zVvjHGw1eMii2ZxmHUS8Ale:4AHqfpzES1EoCizViwB/Hn8A0

    Score
    8/10
    bankercollectiondiscoveryevasionimpactpersistence

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      bankerdiscovery

    • Requests cell location

      Uses Android APIs to to get current cell location.

      collectiondiscovery

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

      evasiondiscovery

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

      evasiondiscovery

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

      discovery

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

      discovery

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

      discovery

    • Registers a broadcast receiver at runtime (usually for listening for system events)

      persistence

    • Checks if the internet connection is available

      discovery
    behavioral1

    • Target

      AlipayMSP206_PPS3_V3.5.4.0619.apk

    • Size

      354KB

    • MD5

      12ae4560d8350db4bd6fa3bc1589614c

    • SHA1

      dbbfce036a1823aaec9d1c7b621adbd7317f7fa9

    • SHA256

      46f025d57f9aed1fb674c0fe8fc77add93cf00ea6e1633596955f33426be7688

    • SHA512

      df7348142a8c294d0d7f7ce77795fd0f81f60831ca1831164e5060c900aa90af430b11f6972103a5c6307d81d8cdf095105a9ab3d01c2183d10d01910976c6fd

    • SSDEEP

      6144:ipIlfloegHi/BBs3dWcfihtB7+Y3Ju4g29f5C8EcPK+WvyQcy2fn1E:ip2JgC/BBsNWfh3Vcc5CLE8Rcy2fn1E

    Score
    8/10
    collectiondiscovery

    • Requests cell location

      Uses Android APIs to to get current cell location.

      collectiondiscovery

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

      discovery

    • Checks if the internet connection is available

      discovery
    behavioral2

    • Target

      plugin-deploy.jar

    • Size

      143KB

    • MD5

      e2c47c231d27f082fd61c159aa105d75

    • SHA1

      79fcdcea972aeb2bb7f5ccdc20e8aa3ac1608395

    • SHA256

      8d4d1d443966c84fe656b33153e338e72251f21b6f18b869cad685506b6435c4

    • SHA512

      4f0cbcab419abf2ca89955c0240533bec51abe53c8364f469cf29b8822e0b9aab168dc0d78cf3ff53b4bfbcc687925d6c9e2ad8fa95f6557f30e5f4ffd3fa091

    • SSDEEP

      3072:WyHWAPxG0lraATjL12iL9mDoDjUDKRWfv+GT4ALHO7khBih:ZxGZIJ2Q9mCUDKbILHrhq

    Score
    1/10
    behavioral3behavioral4behavioral5

MITRE ATT&CK Matrix

Tasks