General

  • Target

    4aa3b65af3ff5ac55c6c2aa2a74cdc17_JaffaCakes118

  • Size

    6.8MB

  • Sample

    240516-mk8l2sgc7y

  • MD5

    4aa3b65af3ff5ac55c6c2aa2a74cdc17

  • SHA1

    d251249b5694864498af5d74595f54bf47a7c9ed

  • SHA256

    8bc1875f1045d38bd0f5eb4cceb7ec407cc2bfde4cc72d9d55e1dc5a89dc63a3

  • SHA512

    f17c09395ca089046876934469b9fe5cebd496451aac69f454ab0f3d7242f0952edd234d9cfdee8b4cbd9622350b4f9a348c8ac4af5ae7cd2783af9862297b3c

  • SSDEEP

    98304:vdZz3867fX950KjGe2SlEti9FTMbWPa5kpHbULv4+W1fDZZ9aspGQI2LU/9n:3zp50K3LlxFTMbUfHbULbW1fZIgcJ

Malware Config

Targets

    • Target

      4aa3b65af3ff5ac55c6c2aa2a74cdc17_JaffaCakes118

    • Size

      6.8MB

    • MD5

      4aa3b65af3ff5ac55c6c2aa2a74cdc17

    • SHA1

      d251249b5694864498af5d74595f54bf47a7c9ed

    • SHA256

      8bc1875f1045d38bd0f5eb4cceb7ec407cc2bfde4cc72d9d55e1dc5a89dc63a3

    • SHA512

      f17c09395ca089046876934469b9fe5cebd496451aac69f454ab0f3d7242f0952edd234d9cfdee8b4cbd9622350b4f9a348c8ac4af5ae7cd2783af9862297b3c

    • SSDEEP

      98304:vdZz3867fX950KjGe2SlEti9FTMbWPa5kpHbULv4+W1fDZZ9aspGQI2LU/9n:3zp50K3LlxFTMbUfHbULbW1fZIgcJ

    Score
    7/10
    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Checks if the internet connection is available

    • Target

      alipay_msp.apk

    • Size

      354KB

    • MD5

      89c04e1ebcd58eca6dd93211628ed0bc

    • SHA1

      7d1e77ce25a635299704dbd95bd95c697572ea9d

    • SHA256

      ee3c608fff51b313f4e0b3e542bedccb4d4db4c8eb44e63bf4be0d468e9ee117

    • SHA512

      3dccaeff9906401855f3071c91012926d7e9250674ea0bb89606e4862223a8343fc7b9369afe4e50031d261b45437107c018f565da5615c49721c3bf1bf6ed01

    • SSDEEP

      6144:cH8LfOo+BjGVN8TdW4zxgnm1Us3JuOK2vf5C8EcPK+WvyQcQ2fnq7:cHLxBiVN8pWggmlY25CLE8RcQ2fnq7

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Checks if the internet connection is available

MITRE ATT&CK Mobile v15

Tasks