General

  • Target

    1f642322783cf1c7ffcdfb95c261a147_JaffaCakes118

  • Size

    17.7MB

  • Sample

    240507-em82lahb2x

  • MD5

    1f642322783cf1c7ffcdfb95c261a147

  • SHA1

    1d328aac8b2e32bb3c7568c1aaa528544fbbe804

  • SHA256

    3a944b69974212eea01f393ecd83d83727be79746aeda62c16681365ab22e5de

  • SHA512

    f167549ae5a59aa1badd799b5e57f0f469bef19cdc826a610f103f00807576219959ba96b8477a1462e90c98acf7e37f702e0aff479fc374806fb4136a49213b

  • SSDEEP

    393216:R9l6kRoFkLVDPietbz7L/BtQsUFe+ta1+PKhm1fsYdF:zlHPnhL/ObY1EfdF

Malware Config

Targets

    • Target

      1f642322783cf1c7ffcdfb95c261a147_JaffaCakes118

    • Size

      17.7MB

    • MD5

      1f642322783cf1c7ffcdfb95c261a147

    • SHA1

      1d328aac8b2e32bb3c7568c1aaa528544fbbe804

    • SHA256

      3a944b69974212eea01f393ecd83d83727be79746aeda62c16681365ab22e5de

    • SHA512

      f167549ae5a59aa1badd799b5e57f0f469bef19cdc826a610f103f00807576219959ba96b8477a1462e90c98acf7e37f702e0aff479fc374806fb4136a49213b

    • SSDEEP

      393216:R9l6kRoFkLVDPietbz7L/BtQsUFe+ta1+PKhm1fsYdF:zlHPnhL/ObY1EfdF

    • Checks known Qemu files.

      Checks for known Qemu files that exist on Android virtual device images.

    • Queries account information for other applications stored on the device

      Application may abuse the framework's APIs to collect account information stored on the device.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Reads the contacts stored on the device.

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Reads information about phone network operator.

    • Checks the presence of a debugger

MITRE ATT&CK Mobile v15

Tasks