219237027090c7e65373663fd7b0a1fdae0df45252f8147637c84095d84cf332

General

Target
529602c6a9c64891fe550594e90ba7d5_JaffaCakes118
Size 23.7MB
Sample240518-chb5ysfc24
SHA256 219237027090c7e65373663fd7b0a1fdae0df45252f8147637c84095d84cf332
MD5 529602c6a9c64891fe550594e90ba7d5
SHA1 fd728f37e869ae86cbd7f3658e18889136e25b8a
SHA512 edf1991baf1928396fedd3b16e3bc71897791bc0c5df3ecef5897403e6e521426f1b57f6034b034ae97fac47836dcde21b87c228600aa1cfb236229e5c33547d
SSDEEP 393216:6vySCToyy8hU/2LfhChzXDjyJFmUs3P9mbmyliCEqH72c8Qdyb/A+XCYdv0b+gsn:bRsyy8hNLfu7Ursf9Qb2NzMiw+ZF+UK6
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Malware Config

Targets

- Target
  529602c6a9c64891fe550594e90ba7d5_JaffaCakes118
- Size 23.7MB
- SHA256 219237027090c7e65373663fd7b0a1fdae0df45252f8147637c84095d84cf332
- MD5 529602c6a9c64891fe550594e90ba7d5
- SHA1 fd728f37e869ae86cbd7f3658e18889136e25b8a
- SHA512 edf1991baf1928396fedd3b16e3bc71897791bc0c5df3ecef5897403e6e521426f1b57f6034b034ae97fac47836dcde21b87c228600aa1cfb236229e5c33547d
- SSDEEP 393216:6vySCToyy8hU/2LfhChzXDjyJFmUs3P9mbmyliCEqH72c8Qdyb/A+XCYdv0b+gsn:bRsyy8hNLfu7Ursf9Qb2NzMiw+ZF+UK6
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

collection discovery evasion impact persistence
- Checks if the Android device is rooted.
  evasion
- Requests cell location
  Uses Android APIs to to get current cell information.
  collection discovery
- Checks Android system properties for emulator presence.
  evasion
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries information about the current nearby Wi-Fi networks
  Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
behavioral1
- Target
  vivounionapk_v4.2.4.0_d74cb3a_201808271150_signed_aligned.vua
- Size 4.2MB
- SHA256 333ee74803ab4b114d6217250623869c751a00f4748c826c19ffcd7b29476195
- MD5 3200674229ed57cf762fc3d8c5137b55
- SHA1 0896d5f138545dc9ddbf0003518880d745c8fe0e
- SHA512 31c96314a2b0d80ef3d6c04c0a6894b6a8ebff7e501fd48499ea0e12969ba4ac00cdd844caf839a16cdcffa5b51ee2f33af36a578dfd450c79c7e2bbc0c521ff
- SSDEEP 98304:aQn4W5hESDzkY18DTTcDPPIKGPBhFI+sqFkSOO:aQ4W5hEIkg8DTTcDPPIK+HFknO
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
behavioral2
- Target
  vivounionsdk.res
- Size 29KB
- SHA256 cc8416f87003538f2c8ea5280a7eaebfb40597b6ebdcc33c4fa64b0cf08d3b73
- MD5 7a92466708fa1ae45c5585a5b986f5aa
- SHA1 e9e8e0dc60208b7a8b64a65550442a73f1166c30
- SHA512 026dec17ed60d89257c8cb7873a0ccc0de910aad6706f1bbb7936229d7074b9542b7b80a2040f466c64e6cf8896e8531ee01ed7acbfa6a7ed90637a5fe2d477d
- SSDEEP 384:RAhiLwh2JKStCYi7PSSDq41bVjDIcRy3ftLYHiLaBsKFj+C:RAV2wYnSDqojDIcsfiHiG3l
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3 behavioral4 behavioral5