General
- Target 2cb26667f8f20ff642fbd2be4b936d32_JaffaCakes118
- Size 2.5MB
- Sample240510-by7q5aed47
- SHA256 33509b8a70788bf8eccfce51d921f5e997777e163d0dcf8ea84638759c964d28
- MD5 2cb26667f8f20ff642fbd2be4b936d32
- SHA1 323086c2bfcd6685a877e367b56723de3b7376fd
- SHA512 8b36f197fe688a820b328ea7b0cf6d7aef07b551a7733a21ce190cc10f1e319ecae65c5c90e313a9e6cdafab05bff81219cd0414c55527ee765a1228e887c939
- SSDEEP 49152:7byoM0s4D/QoYEqiQeNR91qSFfHKdab4oEYGgD1GNEHO+/FeW9j49dOB:a30L/QZZiQeznNFi4Udgj/dL9j4POB
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2cb26667f8f20ff642fbd2be4b936d32_JaffaCakes118.apk
Resource
android-x86-arm-20240506-en
15 signatures
150 seconds
Malware Config
Extracted
Family
-
joker
C2
-
http://120.78.31.198:8030/api
-
http://121.41.88.125:7070/
-
http://47.97.211.44:18888/idlecode/
-
http://data1011.doulaiwen.com:9841/mvideo/
Targets
-
- Target 2cb26667f8f20ff642fbd2be4b936d32_JaffaCakes118
- Size 2.5MB
- SHA256 33509b8a70788bf8eccfce51d921f5e997777e163d0dcf8ea84638759c964d28
- MD5 2cb26667f8f20ff642fbd2be4b936d32
- SHA1 323086c2bfcd6685a877e367b56723de3b7376fd
- SHA512 8b36f197fe688a820b328ea7b0cf6d7aef07b551a7733a21ce190cc10f1e319ecae65c5c90e313a9e6cdafab05bff81219cd0414c55527ee765a1228e887c939
- SSDEEP 49152:7byoM0s4D/QoYEqiQeNR91qSFfHKdab4oEYGgD1GNEHO+/FeW9j49dOB:a30L/QZZiQeznNFi4Udgj/dL9j4POB
- MD5 SHA1 SHA512 SSDEEP
Checks Android system properties for emulator presence.
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Queries the phone number (MSISDN for GSM devices)
Reads the content of SMS inbox messages.
Registers a broadcast receiver at runtime (usually for listening for system events)
Checks if the internet connection is available
Queries the unique device ID (IMEI, MEID, IMSI)
Reads information about phone network operator.
MITRE ATT&CK Mobile v15
Defense Evasion
Download New Code at Runtime
1Execution Guardrails
1Geofencing
1Virtualization/Sandbox Evasion
2System Checks
2