General

  • Target

    54d18c4b9d3bc59c2eb8d9c5491ffc20_JaffaCakes118

  • Size

    9.3MB

  • Sample

    240518-p7adwace51

  • MD5

    54d18c4b9d3bc59c2eb8d9c5491ffc20

  • SHA1

    beefc45f3c3d652e426b0701a42fd787514bb55c

  • SHA256

    05f9c5021323853eaf7dff4d8e40a6344159cdd4798f25aa38850d95e4c703a7

  • SHA512

    8232e9f074a37f500df98be094f8b56e9836124de4516d81717f470f1c9608e880e902cfdf3c635dbe5bcff01b44e8c009bac8479fe5d616f9cf97d22706c848

  • SSDEEP

    196608:1Fuv0PT2SVYB6dTEb7zJ0yl9W9D/6W/QIiM2w4bEMn0Mk/7N0V:+0C14TE7+oI9Dya5ikGEM0x7NY

Malware Config

Targets

    • Target

      54d18c4b9d3bc59c2eb8d9c5491ffc20_JaffaCakes118

    • Size

      9.3MB

    • MD5

      54d18c4b9d3bc59c2eb8d9c5491ffc20

    • SHA1

      beefc45f3c3d652e426b0701a42fd787514bb55c

    • SHA256

      05f9c5021323853eaf7dff4d8e40a6344159cdd4798f25aa38850d95e4c703a7

    • SHA512

      8232e9f074a37f500df98be094f8b56e9836124de4516d81717f470f1c9608e880e902cfdf3c635dbe5bcff01b44e8c009bac8479fe5d616f9cf97d22706c848

    • SSDEEP

      196608:1Fuv0PT2SVYB6dTEb7zJ0yl9W9D/6W/QIiM2w4bEMn0Mk/7N0V:+0C14TE7+oI9Dya5ikGEM0x7NY

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks if the internet connection is available

    • Queries the unique device ID (IMEI, MEID, IMSI)

MITRE ATT&CK Mobile v15

Tasks