General

  • Target

    44ac163947dd200ca35bdc8e0ea355c7_JaffaCakes118

  • Size

    19.3MB

  • Sample

    240515-fv3p8aag4t

  • MD5

    44ac163947dd200ca35bdc8e0ea355c7

  • SHA1

    85806cb48b13c629136ddad5f948d8ecd3f25642

  • SHA256

    dc58a10be8c153a45fd95f70a39d7720f03210375380bb3dcdb4e4557f41dca2

  • SHA512

    a878f1ebcf838da8004b5c69dd65e94d05d3fbe24df10703496e9b9721bdab7d39b7c2264b8c8873919eae592a529edfaf58e1501c5385ce1e53016c3c4a3dcb

  • SSDEEP

    393216:glE3Stne94+4DOZafzlqFHmeHiahZTkh9vHlV4SV61OAQRZPmwpp:j0n8MOZmlq5mkiaTTkh9ESk1OAhA

Malware Config

Targets

    • Target

      44ac163947dd200ca35bdc8e0ea355c7_JaffaCakes118

    • Size

      19.3MB

    • MD5

      44ac163947dd200ca35bdc8e0ea355c7

    • SHA1

      85806cb48b13c629136ddad5f948d8ecd3f25642

    • SHA256

      dc58a10be8c153a45fd95f70a39d7720f03210375380bb3dcdb4e4557f41dca2

    • SHA512

      a878f1ebcf838da8004b5c69dd65e94d05d3fbe24df10703496e9b9721bdab7d39b7c2264b8c8873919eae592a529edfaf58e1501c5385ce1e53016c3c4a3dcb

    • SSDEEP

      393216:glE3Stne94+4DOZafzlqFHmeHiahZTkh9vHlV4SV61OAQRZPmwpp:j0n8MOZmlq5mkiaTTkh9ESk1OAhA

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the mobile country code (MCC)

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks if the internet connection is available

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks