General

  • Target

    495a3e70e372640c7f4109551ea3385d_JaffaCakes118

  • Size

    8.3MB

  • Sample

    240516-eke1qsbb3z

  • MD5

    495a3e70e372640c7f4109551ea3385d

  • SHA1

    5acf9d9e71c731e30dfc1c361a07bac5f46c28be

  • SHA256

    45669a75c5e7094a1c8c7a55842e396dd885979856851e9d9f957288347cfcaa

  • SHA512

    dc7c418be8aaa675df08129e09f056e70ea4edb54d5fbc04ec7a237289e5e30a083218c5950ee47bf70f0453809be603d18fd110bb3f3a628dc29abfa0ea67a5

  • SSDEEP

    196608:owzy8ib3nj/LVAcw6KPecdsyKAMFh3U3H:opdDqcwHdhHMFh3MH

Malware Config

Targets

    • Target

      495a3e70e372640c7f4109551ea3385d_JaffaCakes118

    • Size

      8.3MB

    • MD5

      495a3e70e372640c7f4109551ea3385d

    • SHA1

      5acf9d9e71c731e30dfc1c361a07bac5f46c28be

    • SHA256

      45669a75c5e7094a1c8c7a55842e396dd885979856851e9d9f957288347cfcaa

    • SHA512

      dc7c418be8aaa675df08129e09f056e70ea4edb54d5fbc04ec7a237289e5e30a083218c5950ee47bf70f0453809be603d18fd110bb3f3a628dc29abfa0ea67a5

    • SSDEEP

      196608:owzy8ib3nj/LVAcw6KPecdsyKAMFh3U3H:opdDqcwHdhHMFh3MH

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Reads the contacts stored on the device.

    • Reads the content of SMS inbox messages.

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Tries to add a device administrator.

    • Acquires the wake lock

    • Checks if the internet connection is available

    • Target

      setting.apk

    • Size

      1.2MB

    • MD5

      cce9741937c66c9dd2c65cf83d5e224b

    • SHA1

      1703c94d19da04758f934ad5d555c3ec4d1be8b1

    • SHA256

      5841e4b5714ebcb742b826ecd21f2ab1d471fa7facf471806313f64104d66967

    • SHA512

      f869fdf649f874aee44b49ca2c09035569890b050d9b113cb532c88b338507b7220ae4f14f55f250457e6962f604a0b45ae75ab3dc32e36ad2d0ee4a4af6f80f

    • SSDEEP

      24576:+8DXEfcYzBMeFzVydaRxDK4X7+3unEggla4a94yPmYdG8s:+8DXEfVB73ydIhKo+3uEgglgGyPmt

MITRE ATT&CK Matrix

Tasks