General

  • Target

    54da93ff60910b16bb75e385d3893775_JaffaCakes118

  • Size

    5.6MB

  • Sample

    240518-qb91ascg8v

  • MD5

    54da93ff60910b16bb75e385d3893775

  • SHA1

    3ce8dfa89a36069e15b099630e822dab00547d29

  • SHA256

    71c3178195f44c99ed48c53c5bb68e48bcf771857305d250f210bb4ca1a1c39f

  • SHA512

    89c3792b3a649faa9fb28f51b6638f57298ba9087c3261e47e0b986ee5e8872d36a00ddd7623919dbdf9f2f6714e1714505c409deb774525fd215593b6682047

  • SSDEEP

    98304:rU/2H8Y/5KO1V59jRPVDzsxaNAKvLVgQbTbh2lyX+PL6hbWjsMenoKKAVUQzDDgS:BJRKgDsxAdXbXhJOP2hWWKYkDr8Cka/U

Malware Config

Targets

    • Target

      54da93ff60910b16bb75e385d3893775_JaffaCakes118

    • Size

      5.6MB

    • MD5

      54da93ff60910b16bb75e385d3893775

    • SHA1

      3ce8dfa89a36069e15b099630e822dab00547d29

    • SHA256

      71c3178195f44c99ed48c53c5bb68e48bcf771857305d250f210bb4ca1a1c39f

    • SHA512

      89c3792b3a649faa9fb28f51b6638f57298ba9087c3261e47e0b986ee5e8872d36a00ddd7623919dbdf9f2f6714e1714505c409deb774525fd215593b6682047

    • SSDEEP

      98304:rU/2H8Y/5KO1V59jRPVDzsxaNAKvLVgQbTbh2lyX+PL6hbWjsMenoKKAVUQzDDgS:BJRKgDsxAdXbXhJOP2hWWKYkDr8Cka/U

    • Requests cell location

      Uses Android APIs to to get current cell information.

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    • Queries the mobile country code (MCC)

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks if the internet connection is available

    • Reads information about phone network operator.

    • Listens for changes in the sensor environment (might be used to detect emulation)

MITRE ATT&CK Mobile v15

Tasks