flytrap | 2724b826d5c45c80734ca77f2432bf31d2073e219663a87a40d4e6f34ae4c4e7

General

Target
270b6d276c28e32c3c6954e119bcce53_JaffaCakes118
Size 22.5MB
Sample240508-2jb9sabb9z
SHA256 2724b826d5c45c80734ca77f2432bf31d2073e219663a87a40d4e6f34ae4c4e7
MD5 270b6d276c28e32c3c6954e119bcce53
SHA1 4ca12b6aced3eeb75602ea4181698f62086cb0a9
SHA512 990c4f4196528fabffa262ba82130025c5c6afb5064328330e6303affd0a16a03d0bc14c31a80bb95d909c99f14b7b866ffb13595e89cbeda2ecb06176d0b2de
SSDEEP 393216:oMxdC2z1RiCVLuFRaK/SOkOXMq0HPjw31kt82rCg8ZPNpyWLk1UkV:vM81cALKaK/iM0HE+i+NQXyWLk1Ui
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Targets

- Target
  270b6d276c28e32c3c6954e119bcce53_JaffaCakes118
- Size 22.5MB
- SHA256 2724b826d5c45c80734ca77f2432bf31d2073e219663a87a40d4e6f34ae4c4e7
- MD5 270b6d276c28e32c3c6954e119bcce53
- SHA1 4ca12b6aced3eeb75602ea4181698f62086cb0a9
- SHA512 990c4f4196528fabffa262ba82130025c5c6afb5064328330e6303affd0a16a03d0bc14c31a80bb95d909c99f14b7b866ffb13595e89cbeda2ecb06176d0b2de
- SSDEEP 393216:oMxdC2z1RiCVLuFRaK/SOkOXMq0HPjw31kt82rCg8ZPNpyWLk1UkV:vM81cALKaK/iM0HE+i+NQXyWLk1Ui
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

banker collection discovery evasion impact persistence
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Requests cell location
  Uses Android APIs to to get current cell location.
  collection discovery evasion
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries information about the current nearby Wi-Fi networks
  Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Acquires the wake lock
- Checks if the internet connection is available
  discovery
- Reads information about phone network operator.
  discovery
- Listens for changes in the sensor environment (might be used to detect emulation)
  evasion
behavioral1 behavioral2
- Target
  alipay_msp.apk
- Size 354KB
- SHA256 ee3c608fff51b313f4e0b3e542bedccb4d4db4c8eb44e63bf4be0d468e9ee117
- MD5 89c04e1ebcd58eca6dd93211628ed0bc
- SHA1 7d1e77ce25a635299704dbd95bd95c697572ea9d
- SHA512 3dccaeff9906401855f3071c91012926d7e9250674ea0bb89606e4862223a8343fc7b9369afe4e50031d261b45437107c018f565da5615c49721c3bf1bf6ed01
- SSDEEP 6144:cH8LfOo+BjGVN8TdW4zxgnm1Us3JuOK2vf5C8EcPK+WvyQcQ2fnq7:cHLxBiVN8pWggmlY25CLE8RcQ2fnq7
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

collection discovery evasion
- Requests cell location
  Uses Android APIs to to get current cell location.
  collection discovery evasion
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Checks if the internet connection is available
  discovery
behavioral3