264dc50b7b0fb392cbd011e3454908a510e3797a8c42e4d59ef715977b77d836

General

Target

0184bec26f61b94786b3b35698945780_JaffaCakes118
Size

10.9MB
Sample

240426-yfmpkaag57
MD5

0184bec26f61b94786b3b35698945780
SHA1

38f98b2c9a4b722452cd2438dd0b5f649456738d
SHA256

264dc50b7b0fb392cbd011e3454908a510e3797a8c42e4d59ef715977b77d836
SHA512

a929cb6ad2d65508357bd5df6f906a03272e7ef18d6981ec06fc6684e8232c05ab1b2311befd88af3446a30ae11d6666a58c64d7df87eacc86bc200feb6537df
SSDEEP

196608:D2VTl3CCVlWHRU8IXFF2A6nh5Fa6RhUZa7Q0tAfJr5P5oUa+XfPrIrs5jmJIoc3U:D6TBNVl/X6RLFPSAQ0ijov+PPrIrUj2X

Score

8^/10

Malware Config

Targets

- Target
  
  0184bec26f61b94786b3b35698945780_JaffaCakes118
- Size
  
  10.9MB
- MD5
  
  0184bec26f61b94786b3b35698945780
- SHA1
  
  38f98b2c9a4b722452cd2438dd0b5f649456738d
- SHA256
  
  264dc50b7b0fb392cbd011e3454908a510e3797a8c42e4d59ef715977b77d836
- SHA512
  
  a929cb6ad2d65508357bd5df6f906a03272e7ef18d6981ec06fc6684e8232c05ab1b2311befd88af3446a30ae11d6666a58c64d7df87eacc86bc200feb6537df
- SSDEEP
  
  196608:D2VTl3CCVlWHRU8IXFF2A6nh5Fa6RhUZa7Q0tAfJr5P5oUa+XfPrIrs5jmJIoc3U:D6TBNVl/X6RLFPSAQ0ijov+PPrIrUj2X
Score

8^/10

banker collection discovery evasion impact persistence
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Requests cell location
  Uses Android APIs to to get current cell location.
  collection discovery
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries information about the current nearby Wi-Fi networks
  Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Checks if the internet connection is available
  discovery
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
- Reads information about phone network operator.
  discovery
- Listens for changes in the sensor environment (might be used to detect emulation)
  evasion
behavioral1