General

  • Target

    56e948dc63c8379db6d2b8ab763df469_JaffaCakes118

  • Size

    11.4MB

  • Sample

    240518-1e8azshd25

  • MD5

    56e948dc63c8379db6d2b8ab763df469

  • SHA1

    dd4c3db5674fae64e7ae9c28004f0450f84e118b

  • SHA256

    c2267599085a905e3f723527bed7ec934dbf6e87c8a05024235c741701967fc7

  • SHA512

    d2ca79c08428387b121c9a8777aa3a9e30824f5593563ff4af85137c4c8576b1ad2b31aedc251db277478c105a3791ed201e7e6d77eb6cb1559282537f29d9ec

  • SSDEEP

    196608:Nb643nbNSZNFp/N+pID2X3sm0EB2m0EIiUsbkNZjyUPpK4ErIdF8KwomC0a:N243nbNKNFpf7gKZWUPpurILYojZ

Malware Config

Targets

    • Target

      56e948dc63c8379db6d2b8ab763df469_JaffaCakes118

    • Size

      11.4MB

    • MD5

      56e948dc63c8379db6d2b8ab763df469

    • SHA1

      dd4c3db5674fae64e7ae9c28004f0450f84e118b

    • SHA256

      c2267599085a905e3f723527bed7ec934dbf6e87c8a05024235c741701967fc7

    • SHA512

      d2ca79c08428387b121c9a8777aa3a9e30824f5593563ff4af85137c4c8576b1ad2b31aedc251db277478c105a3791ed201e7e6d77eb6cb1559282537f29d9ec

    • SSDEEP

      196608:Nb643nbNSZNFp/N+pID2X3sm0EB2m0EIiUsbkNZjyUPpK4ErIdF8KwomC0a:N243nbNKNFpf7gKZWUPpurILYojZ

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks if the internet connection is available

    • Reads information about phone network operator.

    • Target

      gdtadv2.jar

    • Size

      622KB

    • MD5

      925c89def267b4f087278431a2ea1ba2

    • SHA1

      f512786fbd277978de2ddbd3855db0aa730e4305

    • SHA256

      7dedfed3255e64dea6cbe43789a32583c9e3a9214d527c8125071be4ad7c1d1d

    • SHA512

      f2b414ad33fa2f176162ec0e4e9fd1fa53233cd40395e616c52a60e5fcfb820be0d464520cb8c568c7090a3fbed4be2eb1d9999b6fa487e3de5851d6aed65dc9

    • SSDEEP

      12288:WpStF524rz2xSbYm5iXuT/w+GMeoZNsAQvoMn+f+BY8CXGec:WAtbfrzZquT/e1aWAQAM8+

    Score
    1/10

MITRE ATT&CK Mobile v15

Tasks