a12b6ec71fdaa730e7194a629f63126e33652f8e205b57e83521706992a7f5fe

General

Target

21de13b974174b2bce8d1257cfc70d20_JaffaCakes118
Size

13.0MB
Sample

240507-1qtlzace43
MD5

21de13b974174b2bce8d1257cfc70d20
SHA1

6dcab579726481f4810f26043aaadd89b8b66ebb
SHA256

a12b6ec71fdaa730e7194a629f63126e33652f8e205b57e83521706992a7f5fe
SHA512

fdd1ac581de616b7833bbb07c092d33d43f0e878a7795e2ddeff2d2d147c943d3e8819c19665c62621f95add697458dd07fdd83eede8056aeb72124cf91a9c76
SSDEEP

196608:8YbA1Lkz5cYofNiqIqYs5Px7ElBqy0eMKyHT6mD/t8LxI+0vaGeH3ESx66sJhT:8QZcBfjZ5Pxz3jOmD/to8yGeNsbT

Score

8^/10

Malware Config

Targets

- Target
  
  21de13b974174b2bce8d1257cfc70d20_JaffaCakes118
- Size
  
  13.0MB
- MD5
  
  21de13b974174b2bce8d1257cfc70d20
- SHA1
  
  6dcab579726481f4810f26043aaadd89b8b66ebb
- SHA256
  
  a12b6ec71fdaa730e7194a629f63126e33652f8e205b57e83521706992a7f5fe
- SHA512
  
  fdd1ac581de616b7833bbb07c092d33d43f0e878a7795e2ddeff2d2d147c943d3e8819c19665c62621f95add697458dd07fdd83eede8056aeb72124cf91a9c76
- SSDEEP
  
  196608:8YbA1Lkz5cYofNiqIqYs5Px7ElBqy0eMKyHT6mD/t8LxI+0vaGeH3ESx66sJhT:8QZcBfjZ5Pxz3jOmD/to8yGeNsbT
Score

8^/10

banker collection discovery evasion persistence
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Requests cell location
  Uses Android APIs to to get current cell location.
  collection discovery evasion
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Checks if the internet connection is available
  discovery
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
behavioral1
- Target
  
  a00.x4i.p2h.api
- Size
  
  1.1MB
- MD5
  
  e477170b000aa8d83f6f69d579ffcbcc
- SHA1
  
  cfb157bac0e39bff7808d11ff38cb3e34e1c8cbf
- SHA256
  
  7b4083de6e70133568d040a2849fa3ad5cf63dc992a691bd8f37993f2fce463a
- SHA512
  
  4e54002781325c98e490cb216ec9384437a5f6bf4ca1d238e3571fab7d2162922d81ba4834a26f993f8e18db06759b3fa9d63ff2feefb7d57cd1127dc2525a31
- SSDEEP
  
  24576:IvrxnTdw49Jieq0m2plSX0/yEuo/wXri90VWg8X0A7vO4cTJrmi5:IdnT59o0NpQX0/L1ui90i0A72PTJrmi5
Score

1^/10
behavioral2
- Target
  
  mod
- Size
  
  412KB
- MD5
  
  e3827e4b851bf8edaab53df6d442177f
- SHA1
  
  b655ac9d8b386734be6052dbb5a4b5f7aa8a79a5
- SHA256
  
  3a7ef6fb967ebb177a1672c19888a80869fbbf5e9a1e17f180300dd3b7365e25
- SHA512
  
  1f5bb9f4dac8c36c1baa898fe3323fb332aa23c4029cf2c6c1ca360a91d97060e38f0e62cf443b2bd554373f87d544f912bc8933bcba843d95aac0c78953c570
- SSDEEP
  
  12288:oU2XN9PUI3vntq96s+PdoDVFqXIvqnm8Far0:oUAxvt2bVqL
Score

1^/10
behavioral3 behavioral4 behavioral5