General

  • Target

    3f32249bca6239f583d79240a92ab793_JaffaCakes118

  • Size

    24.8MB

  • Sample

    240513-nae3esbg3t

  • MD5

    3f32249bca6239f583d79240a92ab793

  • SHA1

    d726443ad431d1289b8aefae8b64d2f28a32345d

  • SHA256

    6a3bb8aaf8d3217877d78f4b0f8f9c76e2a75dd96fcedabe63b756052826a518

  • SHA512

    54927fda2997997de6441762a8909dec4ed3e27e42d91ec2a37269898d868836be5ab40a26eaba46db55d673344d06f23e842d49f0b44473277b616644be1341

  • SSDEEP

    786432:9utoc5pa1DL5tizgAMuExYex3jetEyowDi:9dcsDGPU7xyfr2

Malware Config

Targets

    • Target

      3f32249bca6239f583d79240a92ab793_JaffaCakes118

    • Size

      24.8MB

    • MD5

      3f32249bca6239f583d79240a92ab793

    • SHA1

      d726443ad431d1289b8aefae8b64d2f28a32345d

    • SHA256

      6a3bb8aaf8d3217877d78f4b0f8f9c76e2a75dd96fcedabe63b756052826a518

    • SHA512

      54927fda2997997de6441762a8909dec4ed3e27e42d91ec2a37269898d868836be5ab40a26eaba46db55d673344d06f23e842d49f0b44473277b616644be1341

    • SSDEEP

      786432:9utoc5pa1DL5tizgAMuExYex3jetEyowDi:9dcsDGPU7xyfr2

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Queries account information for other applications stored on the device

      Application may abuse the framework's APIs to collect account information stored on the device.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks if the internet connection is available

    • Reads information about phone network operator.

    • Checks the presence of a debugger

MITRE ATT&CK Mobile v15

Tasks