General

  • Target

    09d559ba11446b0c11df03e469815b2b_JaffaCakes118

  • Size

    24.7MB

  • Sample

    240430-qc8tmaff9y

  • MD5

    09d559ba11446b0c11df03e469815b2b

  • SHA1

    177df61715268f7bfe5742997d574914396cd5e9

  • SHA256

    eb2ecdf71f136dd27d79b14b1278c8e807c49373ae724b158169710bcfcb5cea

  • SHA512

    55e26ff9987a6d56c120c2bb4fea566c56bceb2627b7c822e32635f903d10437304cfec784d56705d7da43a4ac7606855e01ae63fcf8c2cff69bf169f7153397

  • SSDEEP

    786432:M+G8CNnGVBy53373ldjmFZl7JmttLfWIw8+ek:Mx00hdkD7J6LfWIw8g

Malware Config

Targets

    • Target

      09d559ba11446b0c11df03e469815b2b_JaffaCakes118

    • Size

      24.7MB

    • MD5

      09d559ba11446b0c11df03e469815b2b

    • SHA1

      177df61715268f7bfe5742997d574914396cd5e9

    • SHA256

      eb2ecdf71f136dd27d79b14b1278c8e807c49373ae724b158169710bcfcb5cea

    • SHA512

      55e26ff9987a6d56c120c2bb4fea566c56bceb2627b7c822e32635f903d10437304cfec784d56705d7da43a4ac7606855e01ae63fcf8c2cff69bf169f7153397

    • SSDEEP

      786432:M+G8CNnGVBy53373ldjmFZl7JmttLfWIw8+ek:Mx00hdkD7J6LfWIw8g

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries the mobile country code (MCC)

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Acquires the wake lock

    • Checks if the internet connection is available

MITRE ATT&CK Matrix

Tasks