Overview

overview

8

Static

static

6

4d70f7bcda...18.apk

android-9-x86

8

kyx_data.apk

android-9-x86

kyx_data.apk

android-10-x64

kyx_data.apk

android-11-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4d70f7bcdaa10b3d63404b68c10be71d_JaffaCakes118

  • Size

    29.8MB

  • Sample

    240516-2zgt7sda2w

  • MD5

    4d70f7bcdaa10b3d63404b68c10be71d

  • SHA1

    bba81c19a8b057536349358c066232f434c095ab

  • SHA256

    abf831897439dfb0c5a9084ecc760487ad17445e8c50dc9ad5e23896a826c0e5

  • SHA512

    14ed8004a66eb56b03baac7f1ac1e60a33fdb0249d41441a39f619b130cc71d2f68e7573028b8c65d1e967362cb25d896c306b150c9b5ae3557586f152fab259

  • SSDEEP

    786432:vdQUL2n1wja5xb5IeGMFnZyj/Ix9oDFm3ijZj:C14a5RXZyj/Ix9cm3ijZj

Score
8/10
androidcollectiondiscoveryevasion

Malware Config

Targets

    • Target

      4d70f7bcdaa10b3d63404b68c10be71d_JaffaCakes118

    • Size

      29.8MB

    • MD5

      4d70f7bcdaa10b3d63404b68c10be71d

    • SHA1

      bba81c19a8b057536349358c066232f434c095ab

    • SHA256

      abf831897439dfb0c5a9084ecc760487ad17445e8c50dc9ad5e23896a826c0e5

    • SHA512

      14ed8004a66eb56b03baac7f1ac1e60a33fdb0249d41441a39f619b130cc71d2f68e7573028b8c65d1e967362cb25d896c306b150c9b5ae3557586f152fab259

    • SSDEEP

      786432:vdQUL2n1wja5xb5IeGMFnZyj/Ix9oDFm3ijZj:C14a5RXZyj/Ix9cm3ijZj

    Score
    8/10
    collectiondiscoveryevasion

    • Requests cell location

      Uses Android APIs to to get current cell location.

      collectiondiscoveryevasion

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

      evasion

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

      discovery

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

      discovery

    • Checks if the internet connection is available

      discovery

    • Reads information about phone network operator.

      discovery

    • Checks the presence of a debugger

      evasion
    behavioral1

    • Target

      kyx_data

    • Size

      2.5MB

    • MD5

      6c7bd7423801df566ccf944143ea7dff

    • SHA1

      fa5c786f2958a9a8ca56405a07ea82df60e6cca0

    • SHA256

      75a849183ae9ac73ec56b7de55d8099ea9a7680c980a6839f6a0bda7a8f7747f

    • SHA512

      86eb511bce9926ce702ddb069a3e0a5ce0a00580d9c88c331fc98865523650de472dfbe8d3f3b44ca4d27b1224f6b7338e8a90ab1462c38ec57430bd1e0ec1b9

    • SSDEEP

      49152:05SldP2xqdrTSxie38eUL2PiZZ6SvwfOW+zEMSUs9MVSspyX:QSldPAqdTSxRdULJZHvsOWGSF6VHW

    Score
    1/10
    behavioral2behavioral3behavioral4

MITRE ATT&CK Mobile v15

Tasks