General
- Target 33de1cb40712697bcf73f287d896b6e0_JaffaCakes118
- Size 31.5MB
- Sample240511-la65ssdf26
- SHA256 298aad2c337ad87dc1084d7e860fb4c21cb62ee35f2766893c7a6668a30f83af
- MD5 33de1cb40712697bcf73f287d896b6e0
- SHA1 c2bb53d0edd13831b3030ddb311e4be21975319c
- SHA512 4367699cbc45ae85ceeb06a7f32edd302aeee14a7f582580bb7c4bf82dc4cfd6444afd1a3fac424362366cc0acdc2057bc4d62abffe635e90eeeb93a0206119c
- SSDEEP 786432:FjxkK9m4QuqaUpHWJHM+KgflQ1zBUy5MCnpZtb5SlkoqgEf:Fjxkwm4QCqcHrKgflHypNoW
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
33de1cb40712697bcf73f287d896b6e0_JaffaCakes118.apk
Resource
android-x86-arm-20240506-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
33de1cb40712697bcf73f287d896b6e0_JaffaCakes118.apk
Resource
android-x64-arm64-20240506-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 33de1cb40712697bcf73f287d896b6e0_JaffaCakes118
- Size 31.5MB
- SHA256 298aad2c337ad87dc1084d7e860fb4c21cb62ee35f2766893c7a6668a30f83af
- MD5 33de1cb40712697bcf73f287d896b6e0
- SHA1 c2bb53d0edd13831b3030ddb311e4be21975319c
- SHA512 4367699cbc45ae85ceeb06a7f32edd302aeee14a7f582580bb7c4bf82dc4cfd6444afd1a3fac424362366cc0acdc2057bc4d62abffe635e90eeeb93a0206119c
- SSDEEP 786432:FjxkK9m4QuqaUpHWJHM+KgflQ1zBUy5MCnpZtb5SlkoqgEf:Fjxkwm4QCqcHrKgflHypNoW
- MD5 SHA1 SHA512 SSDEEP
Checks Android system properties for emulator presence.
Checks Qemu related system properties.
Checks for Android system properties related to Qemu for Emulator detection.
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Queries the mobile country code (MCC)
Registers a broadcast receiver at runtime (usually for listening for system events)
Acquires the wake lock
Checks if the internet connection is available
Queries the unique device ID (IMEI, MEID, IMSI)
Reads information about phone network operator.
Listens for changes in the sensor environment (might be used to detect emulation)
MITRE ATT&CK Mobile v15
Defense Evasion
Download New Code at Runtime
1Execution Guardrails
1Geofencing
1Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
4System Checks
4