General

  • Target
    0ef1812b12b096aeea49493db5f8e144_JaffaCakes118
  • Size 9.7MB
  • Sample240502-tetz2aed54
  • SHA256 2e812b6b5ef4b43cc457c609aa625924fcb9bae76175e4f5d355ee864c219198
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • joker

C2
  • http://config.inmobi.com/config-server/v1/config/secure.cfg

  • http://i.w.inmobi.com/showad.asm

Targets

    • Target
      0ef1812b12b096aeea49493db5f8e144_JaffaCakes118
    • Size 9.7MB
    • SHA256 2e812b6b5ef4b43cc457c609aa625924fcb9bae76175e4f5d355ee864c219198
    • MD5 SHA1 SHA512 SSDEEP
    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the mobile country code (MCC)

    • Queries the phone number (MSISDN for GSM devices)

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Requests dangerous framework permissions

    • Target
      BannerPlugin-3.0.apk
    • Size 44KB
    • SHA256 dd28222be3e000f397f2285cfc71d883b624ebdec5bad905066dadc95e49557b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      CommonPlugin-4.6.apk
    • Size 505KB
    • SHA256 45ceacb3b5c716224e0e71acc4bef8af48a0e435669d5db8c53bbf4ef19b8f34
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      FrameworkPlugin-3.4.apk
    • Size 18KB
    • SHA256 4a99f0fdec8d646f96ee4ee70fa021a978e8b1068b123923e0c1bf2192c8ecef
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      __xadsdk__remote__final__.jar
    • Size 83KB
    • SHA256 fe2fe2810faab43ae935927bfde6faafb8c74532f760afbecff9585d4404e741
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      gdtadv2.jar
    • Size 128KB
    • SHA256 83b17bee6712defbd2c6a91c4f5c8e3a4b1d9c69d7fafaa0dedff1676b4bf687
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10

MITRE ATT&CK Mobile v15

Tasks