General

  • Target

    42f2c95a249fad0a878ee90a528f9a06_JaffaCakes118

  • Size

    23.5MB

  • Sample

    240514-za3z2aff45

  • MD5

    42f2c95a249fad0a878ee90a528f9a06

  • SHA1

    d42fda4ccfd1c45f1369b2e1d3d1d1e328acfa34

  • SHA256

    ebd087cee8d99f68726643c90cc4fc8c48645d262cea6b577e3629808e79d996

  • SHA512

    eb14c5d87be83ab66e7d4d5d4f5adf65e1094abe486bd2490af1579a27a3d1dcbff7da1b2f5bf6598c13f6990199d1f5041b1de01fcc12939f4e7770abc43941

  • SSDEEP

    393216:xGYIu7alQpod+06A71vlqNDEjOc13MVuwLzBkfDTHgYj0GY9tO8tqQbJ4yWjouo+:xuu7albd+0Zq6FFMV1zBkrTHcF9v/Wjl

Malware Config

Targets

    • Target

      42f2c95a249fad0a878ee90a528f9a06_JaffaCakes118

    • Size

      23.5MB

    • MD5

      42f2c95a249fad0a878ee90a528f9a06

    • SHA1

      d42fda4ccfd1c45f1369b2e1d3d1d1e328acfa34

    • SHA256

      ebd087cee8d99f68726643c90cc4fc8c48645d262cea6b577e3629808e79d996

    • SHA512

      eb14c5d87be83ab66e7d4d5d4f5adf65e1094abe486bd2490af1579a27a3d1dcbff7da1b2f5bf6598c13f6990199d1f5041b1de01fcc12939f4e7770abc43941

    • SSDEEP

      393216:xGYIu7alQpod+06A71vlqNDEjOc13MVuwLzBkfDTHgYj0GY9tO8tqQbJ4yWjouo+:xuu7albd+0Zq6FFMV1zBkrTHcF9v/Wjl

    Score
    1/10
    • Target

      box.apk

    • Size

      7.0MB

    • MD5

      234c80631776ab147b67e72dd99d80ee

    • SHA1

      7a54c1f4bc0d5cf58a21cb2dce177851a660ab7a

    • SHA256

      64a84251f525aa4e5368b5bf4b87aec5ffa2f5907cda0005f73505c67f978280

    • SHA512

      3a22ed0f3b4ef71d5a64fb66a9d3d12c4d2dde234cf3c5640b3bb6d5929ad1b23cbba0440ceb43113331fe0e8f826297493c358c7f492e7db400cb6bc224d29b

    • SSDEEP

      98304:UAQWC295gIeXkMUaYfeNjgc70fGCgyVDo97NELpYWTS/RCVH0LZzvNcGGxpeVk/G:eq5ggaYsjgceGreDaup6RGHC1+vvG

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks if the internet connection is available

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks