General

  • Target

    4a9460fd616930183bf41de19229dab4_JaffaCakes118

  • Size

    17.8MB

  • Sample

    240516-maq91sgc22

  • MD5

    4a9460fd616930183bf41de19229dab4

  • SHA1

    7972515154b85500a355e1a46450f7954d298c61

  • SHA256

    ceb79d66099f50f569a71a64f1ebecb5cd3f787c1bc67eb967a4491a93892eae

  • SHA512

    418d86b483a988e9156cd4e155138bb9993a7154ea20cb391d2d1ea0180b2ea5992962074dc6ae88afe54aabed0c6ffe67c83246061d174cf440e3aedc21ab56

  • SSDEEP

    393216:JAe2toTHBiV6P0z7TGAp7uCTZWrGfKrVAMwJvTLbufds8ig6XA3E:Ge6oTH707Tp7fuobfufdss6F

Malware Config

Targets

    • Target

      4a9460fd616930183bf41de19229dab4_JaffaCakes118

    • Size

      17.8MB

    • MD5

      4a9460fd616930183bf41de19229dab4

    • SHA1

      7972515154b85500a355e1a46450f7954d298c61

    • SHA256

      ceb79d66099f50f569a71a64f1ebecb5cd3f787c1bc67eb967a4491a93892eae

    • SHA512

      418d86b483a988e9156cd4e155138bb9993a7154ea20cb391d2d1ea0180b2ea5992962074dc6ae88afe54aabed0c6ffe67c83246061d174cf440e3aedc21ab56

    • SSDEEP

      393216:JAe2toTHBiV6P0z7TGAp7uCTZWrGfKrVAMwJvTLbufds8ig6XA3E:Ge6oTH707Tp7fuobfufdss6F

    Score
    7/10
    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Acquires the wake lock

    • Checks if the internet connection is available

    • Target

      7723box_pjz.apk

    • Size

      3.3MB

    • MD5

      2dbfa511a770cb9923d85b15a9841848

    • SHA1

      7618c9af34437781884bec561d12ed2a0781e56a

    • SHA256

      07d5827ef21744d399bf1888c198a3715235c887c0abc82cba3545b9864c3837

    • SHA512

      fa718fde2af8f491407c927550410eb5eb6a40dc4df144507bd63b285ab7e8b630db85d11da5572b5ecb5b88ed38cc1cdc0d2fa7007717c17ac67ac859ac24be

    • SSDEEP

      98304:V3XuuHwWUJrVwUOLuAXaK2Koz8sdw428SlZLx9pvY:hx0rVwUqqK5Iw42vTLx9VY

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the unique device ID (IMEI, MEID, IMSI)

MITRE ATT&CK Mobile v15

Tasks