47cf389d2af4a899439bd8f2453235fda639538ffbbffc1016fa05d28aa6e0d4

Sharing

Copy URL

Twitter E-mail

General

Target

3ed5507879f0f301e9406b9bedd63542_JaffaCakes118
Size

15.2MB
Sample

240513-ljm4aage2t
MD5

3ed5507879f0f301e9406b9bedd63542
SHA1

e87f459a0348ddecfedfc70d2778f3e99098f050
SHA256

47cf389d2af4a899439bd8f2453235fda639538ffbbffc1016fa05d28aa6e0d4
SHA512

b7f4b3cbd605b24ced8c1a0cab72326a3da580ad14cc0a9da5831738b5a04ddf4862e14d1636c998be122c2e21c7230dcd3b5515f3d292685ac3d49784799d60
SSDEEP

393216:9IyP6h5RlrhgF4Y66iU5vF3ihbVXPott/VBEwVxgt2+pHYeV:9I5pgF9f9tUhtPotHfQtHYW

Score

8^/10

Malware Config

Targets

- Target
  
  3ed5507879f0f301e9406b9bedd63542_JaffaCakes118
- Size
  
  15.2MB
- MD5
  
  3ed5507879f0f301e9406b9bedd63542
- SHA1
  
  e87f459a0348ddecfedfc70d2778f3e99098f050
- SHA256
  
  47cf389d2af4a899439bd8f2453235fda639538ffbbffc1016fa05d28aa6e0d4
- SHA512
  
  b7f4b3cbd605b24ced8c1a0cab72326a3da580ad14cc0a9da5831738b5a04ddf4862e14d1636c998be122c2e21c7230dcd3b5515f3d292685ac3d49784799d60
- SSDEEP
  
  393216:9IyP6h5RlrhgF4Y66iU5vF3ihbVXPott/VBEwVxgt2+pHYeV:9I5pgF9f9tUhtPotHfQtHYW
Score

8^/10

banker collection discovery evasion execution impact persistence
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Requests cell location
  Uses Android APIs to to get current cell location.
  collection discovery evasion
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Checks known Qemu files.
  Checks for known Qemu files that exist on Android virtual device images.
  evasion
- Checks known Qemu pipes.
  Checks for known pipes used by the Android emulator to communicate with the host.
  evasion
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  evasion persistence
- Queries account information for other applications stored on the device
  Application may abuse the framework's APIs to collect account information stored on the device.
  collection
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Checks if the internet connection is available
  discovery
- Reads information about phone network operator.
  discovery
- Schedules tasks to execute at a specified time
  Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
  execution persistence
behavioral1
- Target
  
  ugpsdk-core.jar
- Size
  
  171KB
- MD5
  
  6fda87c88adf8e81ba0c3346e92740b0
- SHA1
  
  2bcd9ced0f1627f44b976a1c0404a0a46e80b718
- SHA256
  
  b8da49951e0768db74fa142e6c2682fcc6fe124b37cf97ff1b0e8c88a89574a5
- SHA512
  
  4a2bf9d278d6d2523d865c249b9ca35ea069df2920364e71ebd7e7e5b894f95b1866028e200c75c57ab93a13bc0921e4cdf092e780256279c81c239bd04441f2
- SSDEEP
  
  3072:RYlzJeP0+vmNTUI1hFkFDxNdhkQREpLZpUQJmxY3W:kJes+vmVJrFGxNdh8ZmQJmeW
Score

1^/10
behavioral2 behavioral3 behavioral4
- Target
  
  ugpsdk-lib.jar
- Size
  
  77KB
- MD5
  
  94d2e6d2898cbcf1291d41159f1d4959
- SHA1
  
  0e46dc88eb4a4ffa7b6040b8f4904fa6e4440136
- SHA256
  
  313ff290ee3439141875d3682e9b9bc6b86c73500f2619cbdaadad83400723d2
- SHA512
  
  6cc5daf893ac8f1bee85d536821093b80d63bd643d57e6f8d274fec638810304a613055ad18be342fe283f15bb027d064b9ae3af4911268187c3eca029fdcc31
- SSDEEP
  
  1536:7jLumNsDmlSbYxnVrRwh8J7g7AlWTOeYZ16lcX//sGy4:7jLTNswnxVrRNJcAqOeecG/24
Score

1^/10
behavioral5 behavioral6 behavioral7
- Target
  
  ugpsdk-upgrade.jar
- Size
  
  12KB
- MD5
  
  1551ddca8f5c300d2976f1b293a39b86
- SHA1
  
  ed84819b283aa8333927e9a8e82de0397a1a45bf
- SHA256
  
  6f0f2ccd1078177d9704393e5b19bd062e4bf1300cef3c20385e6f057a0d6c62
- SHA512
  
  74c2b21988ffecdc90694623cc802d233d6f39555e6dca1db5cf937220b8167e0b6ad06d0bd918e4eb7c22815e039859f2d4bf20866d75b80b039d50cafd84c4
- SSDEEP
  
  384:J8FOOrl9EuUqmi4kmQtqqN15/bPiDlyK91inAauF:JkH9GjDqNf/biDlPP
Score

1^/10
behavioral10 behavioral8 behavioral9