Overview
overview
7Static
static
634239602aa...18.apk
android-9-x86
7CommonPlugin-4.7.apk
android-9-x86
1CommonPlugin-4.7.apk
android-10-x64
1CommonPlugin-4.7.apk
android-11-x64
1FeedPlugin-2.9.apk
android-9-x86
1FeedPlugin-2.9.apk
android-10-x64
1FeedPlugin-2.9.apk
android-11-x64
1FrameworkP....4.apk
android-9-x86
1FrameworkP....4.apk
android-10-x64
1FrameworkP....4.apk
android-11-x64
1WelcomePlugin-3.3.apk
android-9-x86
1WelcomePlugin-3.3.apk
android-10-x64
1WelcomePlugin-3.3.apk
android-11-x64
1gdtadv2.apk
android-9-x86
gdtadv2.apk
android-10-x64
gdtadv2.apk
android-11-x64
General
-
Target
34239602aa69b6f670296178ced80712_JaffaCakes118
-
Size
24.7MB
-
Sample
240511-ml6h3sfe58
-
MD5
34239602aa69b6f670296178ced80712
-
SHA1
e683b278610766c8919c68e9335fcc536d62a92b
-
SHA256
fa68313d2c69ffc9aa45ad8c4af444fb698280162930227b980515f7cc4eb40d
-
SHA512
4b459691af5c6813423eec079bd35ad87f223dd71fd92780aefbdc9bb7a397668f62bd4dccd84a51230ca062fea4897bf8c6f7322cf76ed0012572d8fd7d9516
-
SSDEEP
393216:+VtL9QIoO5VXRFd5jzEKb3n7ljZpkCBvfggK00iEeei9F+ojH3r029m2updBpe:KxTBRz5jIo37lbnZIgY7i+GXo29V0E
Static task
static1
Behavioral task
behavioral1
Sample
34239602aa69b6f670296178ced80712_JaffaCakes118.apk
Resource
android-x86-arm-20240506-en
Behavioral task
behavioral2
Sample
CommonPlugin-4.7.apk
Resource
android-x86-arm-20240506-en
Behavioral task
behavioral3
Sample
CommonPlugin-4.7.apk
Resource
android-x64-20240506-en
Behavioral task
behavioral4
Sample
CommonPlugin-4.7.apk
Resource
android-x64-arm64-20240506-en
Behavioral task
behavioral5
Sample
FeedPlugin-2.9.apk
Resource
android-x86-arm-20240506-en
Behavioral task
behavioral6
Sample
FeedPlugin-2.9.apk
Resource
android-x64-20240506-en
Behavioral task
behavioral7
Sample
FeedPlugin-2.9.apk
Resource
android-x64-arm64-20240506-en
Behavioral task
behavioral8
Sample
FrameworkPlugin-3.4.apk
Resource
android-x86-arm-20240506-en
Behavioral task
behavioral9
Sample
FrameworkPlugin-3.4.apk
Resource
android-x64-20240506-en
Behavioral task
behavioral10
Sample
FrameworkPlugin-3.4.apk
Resource
android-x64-arm64-20240506-en
Behavioral task
behavioral11
Sample
WelcomePlugin-3.3.apk
Resource
android-x86-arm-20240506-en
Behavioral task
behavioral12
Sample
WelcomePlugin-3.3.apk
Resource
android-x64-20240506-en
Behavioral task
behavioral13
Sample
WelcomePlugin-3.3.apk
Resource
android-x64-arm64-20240506-en
Behavioral task
behavioral14
Sample
gdtadv2.apk
Resource
android-x86-arm-20240506-en
Behavioral task
behavioral15
Sample
gdtadv2.apk
Resource
android-x64-20240506-en
Behavioral task
behavioral16
Sample
gdtadv2.apk
Resource
android-x64-arm64-20240506-en
Malware Config
Targets
-
-
Target
34239602aa69b6f670296178ced80712_JaffaCakes118
-
Size
24.7MB
-
MD5
34239602aa69b6f670296178ced80712
-
SHA1
e683b278610766c8919c68e9335fcc536d62a92b
-
SHA256
fa68313d2c69ffc9aa45ad8c4af444fb698280162930227b980515f7cc4eb40d
-
SHA512
4b459691af5c6813423eec079bd35ad87f223dd71fd92780aefbdc9bb7a397668f62bd4dccd84a51230ca062fea4897bf8c6f7322cf76ed0012572d8fd7d9516
-
SSDEEP
393216:+VtL9QIoO5VXRFd5jzEKb3n7ljZpkCBvfggK00iEeei9F+ojH3r029m2updBpe:KxTBRz5jIo37lbnZIgY7i+GXo29V0E
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries account information for other applications stored on the device
Application may abuse the framework's APIs to collect account information stored on the device.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the mobile country code (MCC)
-
Queries the phone number (MSISDN for GSM devices)
-
Registers a broadcast receiver at runtime (usually for listening for system events)
-
Acquires the wake lock
-
Checks if the internet connection is available
-
Reads information about phone network operator.
-
Requests dangerous framework permissions
-
Schedules tasks to execute at a specified time
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
-
-
-
Target
CommonPlugin-4.7.apk
-
Size
508KB
-
MD5
a8cea9a97c2b3334bf9bc0cadc91740e
-
SHA1
ce5a3561f8ba7b332c35370cf00a16d06b7df790
-
SHA256
4b56379d87e572582d6e1bcd2e33b96b03b2584feea34ab4fc812cc25856baaa
-
SHA512
1ab841cd8edda0f3c1444ee2d8825b60100675b918a4dc506b590a882a9cd6a561e9f7d0f71685fe6ca4b65d97af9c8c0785eb474201eea61ead9bf036b50af7
-
SSDEEP
12288:XX5o+tee1jL6fLn35ECc2nZFdBzjStccqkWJT1ISY:HHFGLnSgZFbXlkuBY
Score1/10 -
-
-
Target
FeedPlugin-2.9.apk
-
Size
41KB
-
MD5
b96238853a4843ccee61ca13d6d7d985
-
SHA1
e58ad6da51292c6b2b894f2b23979b1c2fef8cd2
-
SHA256
ae3ed1b92aae41cdeb48748cd6948eaccc542dd7993b9e98c7c2c18a4c24ddc7
-
SHA512
58b5db8a407529279099701d4c7302033d5dd8ca24fd82eb5b810cfab7886f55cff8080de1a56652de1ff7c92f50bf772bab6bffff0e50c4fec5d8a092d8ed37
-
SSDEEP
768:ZZl63igMDmc8v1GQQYV9780Zvw3+N4j0jPSc1wRcdEXh9E+Qr1N:Zf63NMgAQo3+qjUPSc1wRs8OXhN
Score1/10 -
-
-
Target
FrameworkPlugin-3.4.apk
-
Size
18KB
-
MD5
367dad014f883598f13b649225e4218f
-
SHA1
5b59279d2e243d0ea0d95bd3ff13a98207effa51
-
SHA256
4a99f0fdec8d646f96ee4ee70fa021a978e8b1068b123923e0c1bf2192c8ecef
-
SHA512
61bea143afdcaf10511779fbf3d5cc71c2ea4174c519fdf00069f4253663da084eff6b8c0faba151dd183f6a0fc90af98324b257f85f5fcbf58066f103ad9745
-
SSDEEP
384:EvBU3+URJOVgjTUTiYEuA+EbHVQVXjuU5SAwXfYr+MmLIQlo2jig1rGewe:Ev63RE9BEuA+ERQ9d8U+MmLRlo2jig1r
Score1/10 -
-
-
Target
WelcomePlugin-3.3.apk
-
Size
31KB
-
MD5
0f6cb1da81cc9c511cd12a5180447498
-
SHA1
84b8302ce8d50f456d0d15230416241a0a1d1523
-
SHA256
c968c214ca3366b3bb7213bb9ae905a4561d43e511818e9f5763d34d7801a4b5
-
SHA512
cb73ff5a97adfcf993b441a46b8216eda3a15f1c1d65ebf6cae4e63fbe4bcd8c47e2349021055be959dd194d795cc371790aa27a880e62a7523d4c648bf8efc9
-
SSDEEP
768:LNSrXFWLKxe7X+Fu9ApwuN6zatksT8LjgImx8Swf6NCHEvjVd1qhC:BSbgLKxe7wuyp96za7ILMt8FfbHEZ
Score1/10 -
-
-
Target
gdtadv2.jar
-
Size
128KB
-
MD5
d33b3ec7def68b71f2fed86f8816651c
-
SHA1
0365fa5845cc259d449b33af352e858b654353c9
-
SHA256
83b17bee6712defbd2c6a91c4f5c8e3a4b1d9c69d7fafaa0dedff1676b4bf687
-
SHA512
9cb8af47bec4402a148cb4950780fb96686b79c897530316c02964d917ab92a1554a3034f186ac6da6a15a7ad1f7d7fa8ea145cae5bb1d540c877d753ba052f6
-
SSDEEP
3072:tlyPwIT8y7NhgXbxdo+i0kgs5jU9HlJ67B3RzUqujrasu/:tlyPwKo30lguwJYB3RzCpu/
Score1/10 -
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Scheduled Task/Job
1Defense Evasion
Download New Code at Runtime
1Foreground Persistence
1Virtualization/Sandbox Evasion
2System Checks
2