General
-
Target
0b79cef4ef45d0dceb2787bbda73d67c_JaffaCakes118
-
Size
8.0MB
-
Sample
240501-lqvfyaca41
-
MD5
0b79cef4ef45d0dceb2787bbda73d67c
-
SHA1
60ad47a506af11799ef700315cf0fe7203d30588
-
SHA256
bc015a02e3a0486a7c226a3948a4c5794756041044f5c2f381ca5a85dbf58369
-
SHA512
4e65601daa32624a9052f305189438ac2835c619898e195652f22f1bc2fbb09e6f7ad520342b6fbd863e1f01b97602b9f04bc297a3b9f939d658b25b52486a37
-
SSDEEP
196608:WRsCRqweE/MniEB4uJAeh0m0hROONkPwLPacPDoHJVCLF:y0wSnibuJVWm0rZkPwrrMHJVCh
Static task
static1
Behavioral task
behavioral1
Sample
0b79cef4ef45d0dceb2787bbda73d67c_JaffaCakes118.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
0b79cef4ef45d0dceb2787bbda73d67c_JaffaCakes118.apk
Resource
android-33-x64-arm64-20240229-en
Malware Config
Targets
-
-
Target
0b79cef4ef45d0dceb2787bbda73d67c_JaffaCakes118
-
Size
8.0MB
-
MD5
0b79cef4ef45d0dceb2787bbda73d67c
-
SHA1
60ad47a506af11799ef700315cf0fe7203d30588
-
SHA256
bc015a02e3a0486a7c226a3948a4c5794756041044f5c2f381ca5a85dbf58369
-
SHA512
4e65601daa32624a9052f305189438ac2835c619898e195652f22f1bc2fbb09e6f7ad520342b6fbd863e1f01b97602b9f04bc297a3b9f939d658b25b52486a37
-
SSDEEP
196608:WRsCRqweE/MniEB4uJAeh0m0hROONkPwLPacPDoHJVCLF:y0wSnibuJVWm0rZkPwrrMHJVCh
Score8/10-
Checks known Qemu files.
Checks for known Qemu files that exist on Android virtual device images.
-
Checks known Qemu pipes.
Checks for known pipes used by the Android emulator to communicate with the host.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries information about the current nearby Wi-Fi networks
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
-
Registers a broadcast receiver at runtime (usually for listening for system events)
-
Checks if the internet connection is available
-
Queries the unique device ID (IMEI, MEID, IMSI)
-
Listens for changes in the sensor environment (might be used to detect emulation)
-
MITRE ATT&CK Mobile v15
Defense Evasion
Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
4System Checks
4