General

  • Target

    52ea4cac709f284970cfe7dca0e083d0_JaffaCakes118

  • Size

    6.3MB

  • Sample

    240518-ef1fwaah56

  • MD5

    52ea4cac709f284970cfe7dca0e083d0

  • SHA1

    31b58ab5562b0cfd724ac0f60d148e735f3b4d18

  • SHA256

    3c878cd1477706a031d7fcf924713ad87b9cfa7b749e432c6b83f8ed056cb567

  • SHA512

    aaa8532e13c137d2ce6b75062380aa4e2a9023cb5a3ba00f4733220469d2ebc3c3fe00cdcf4983aadba6a6a1902bf983aaa3c188c23ef6d7e1e34105bcfae47d

  • SSDEEP

    98304:2190402WeD90Vzj9rFbbB3HQcl5s0wItwOBdDHi0i/ENhm8BaWdzpMlugDTKsIbb:2/D06K5NtnPSOBdDCVkmvWBmbTLIbb

Malware Config

Targets

    • Target

      52ea4cac709f284970cfe7dca0e083d0_JaffaCakes118

    • Size

      6.3MB

    • MD5

      52ea4cac709f284970cfe7dca0e083d0

    • SHA1

      31b58ab5562b0cfd724ac0f60d148e735f3b4d18

    • SHA256

      3c878cd1477706a031d7fcf924713ad87b9cfa7b749e432c6b83f8ed056cb567

    • SHA512

      aaa8532e13c137d2ce6b75062380aa4e2a9023cb5a3ba00f4733220469d2ebc3c3fe00cdcf4983aadba6a6a1902bf983aaa3c188c23ef6d7e1e34105bcfae47d

    • SSDEEP

      98304:2190402WeD90Vzj9rFbbB3HQcl5s0wItwOBdDHi0i/ENhm8BaWdzpMlugDTKsIbb:2/D06K5NtnPSOBdDCVkmvWBmbTLIbb

    • Checks if the Android device is rooted.

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks if the internet connection is available

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Target

      gdtadv2.jar

    • Size

      420KB

    • MD5

      f0ee7f7dd1ef4e5cd436ed6e1c609e5a

    • SHA1

      7d112abb7896294b075721b0200f0812ed65a418

    • SHA256

      0906bca7332f10d1bdc98b04eb5ad9de2af5da0590b5615aa5f66852b78d9369

    • SHA512

      5912538f74fcbe24bba5e3eef2804fd160ccd002bf144e30dd910c9d52d6a3e2dc172a3baa1f6d64ed93346a9b1d4760ae17ec6d1c7c8a4de8cb9264b82bf2be

    • SSDEEP

      6144:mQCx8Rp2KiQB/B4Qfdw3Vr/+rwWTLAUq3PwB32k59CruFIBSSAOC8hkIwx:ok/z/BJfdUW8W8ho4k59tSaOCckIS

    Score
    1/10

MITRE ATT&CK Mobile v15

Tasks