General
-
Target
515257eed660ad6345930c3f1c03bdcc_JaffaCakes118
-
Size
4.2MB
-
Sample
240517-y5bzcshc3s
-
MD5
515257eed660ad6345930c3f1c03bdcc
-
SHA1
d4662caee42d040b93e68eccd05073aa9e914453
-
SHA256
8c0cd19b7b71fb2cbbcab49cf436009e7f8f35402749426ee090b8c8b69c7e72
-
SHA512
49ef25b9f7f38def8c046203ccf86c3ba8cd0b1bde983c0a02219683abd5818aac35e7151d8b6322cfbda4c1dc0d00b4fe572a13e89e9501068ab7c48381b258
-
SSDEEP
98304:aQS5HjKr/tiHLJfFgxx0VC0s1KY68ljb9Wmk5MRpOx:aQSZIkELcA0UZW06x
Malware Config
Targets
-
-
Target
515257eed660ad6345930c3f1c03bdcc_JaffaCakes118
-
Size
4.2MB
-
MD5
515257eed660ad6345930c3f1c03bdcc
-
SHA1
d4662caee42d040b93e68eccd05073aa9e914453
-
SHA256
8c0cd19b7b71fb2cbbcab49cf436009e7f8f35402749426ee090b8c8b69c7e72
-
SHA512
49ef25b9f7f38def8c046203ccf86c3ba8cd0b1bde983c0a02219683abd5818aac35e7151d8b6322cfbda4c1dc0d00b4fe572a13e89e9501068ab7c48381b258
-
SSDEEP
98304:aQS5HjKr/tiHLJfFgxx0VC0s1KY68ljb9Wmk5MRpOx:aQSZIkELcA0UZW06x
Score8/10-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
-
Requests cell location
Uses Android APIs to to get current cell location.
-
Requests cell location
Uses Android APIs to to get current cell information.
-
Queries information about the current nearby Wi-Fi networks
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
-
Registers a broadcast receiver at runtime (usually for listening for system events)
-
Acquires the wake lock
-
Checks if the internet connection is available
-
Queries the unique device ID (IMEI, MEID, IMSI)
-
Reads information about phone network operator.
-
Schedules tasks to execute at a specified time
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
-