General
- Target 55f15be5341e7f25d2585d8551a0f489_JaffaCakes118
- Size 23.0MB
- Sample240518-v3bn2afa33
- SHA256 1fca6409cb30b3fb7f8a62cabba7f6db317f079341af43baa0bcafcf476d5bf1
- MD5 55f15be5341e7f25d2585d8551a0f489
- SHA1 7e9d686c68f0753a5762f724ce06444b742598e5
- SHA512 47cfd931f604c1f7e0eb71187803ba156b1c11268f6848ea21e2ede1b79a7a7856d09e720a903923961dbeab6121757f0a08d07ee0c5d70a36a2701ab3216797
- SSDEEP 393216:k/faZ9wX1FWKVibpMyCwxyKGh4RNYCph66QGl6xPURI83JIcUGBJvenO2:waTm/iuwxVRNYWQy6xPYn5jve3
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
55f15be5341e7f25d2585d8551a0f489_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
55f15be5341e7f25d2585d8551a0f489_JaffaCakes118.apk
Resource
android-x64-20240514-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 55f15be5341e7f25d2585d8551a0f489_JaffaCakes118
- Size 23.0MB
- SHA256 1fca6409cb30b3fb7f8a62cabba7f6db317f079341af43baa0bcafcf476d5bf1
- MD5 55f15be5341e7f25d2585d8551a0f489
- SHA1 7e9d686c68f0753a5762f724ce06444b742598e5
- SHA512 47cfd931f604c1f7e0eb71187803ba156b1c11268f6848ea21e2ede1b79a7a7856d09e720a903923961dbeab6121757f0a08d07ee0c5d70a36a2701ab3216797
- SSDEEP 393216:k/faZ9wX1FWKVibpMyCwxyKGh4RNYCph66QGl6xPURI83JIcUGBJvenO2:waTm/iuwxVRNYWQy6xPYn5jve3
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Checks if the Android device is rooted.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries information about the current nearby Wi-Fi networks
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
-
Registers a broadcast receiver at runtime (usually for listening for system events)
-
Checks if the internet connection is available
-
Reads information about phone network operator.
-
Listens for changes in the sensor environment (might be used to detect emulation)
MITRE ATT&CK Mobile v15
Defense Evasion
Download New Code at Runtime
1Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
2System Checks
2