General
- Target 578895d91c2d3fb8432793fc6f3ba277_JaffaCakes118
- Size 3.4MB
- Sample240519-aaf3tsfe87
- SHA256 68e71cdf7ed6923046c1eea13355cb37460c8249d48f09ef477fab65e79ca9a9
- MD5 578895d91c2d3fb8432793fc6f3ba277
- SHA1 fabed40f56da106656255069a1c9542d1662f5fc
- SHA512 3a2c7610038b57cb06ae82ec67323bc0e40ef6d906a05a3a6df941f7b6d0dd680da2974613984be28d8fe1a8f295e3dd57672a11f270e0f0c9c9678e796ef78f
- SSDEEP 98304:9nbwpw2KMyNW2kEA+sBzh/pYJG0mU0I/OZmSFy:9nUZhuvpvOnFy
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
578895d91c2d3fb8432793fc6f3ba277_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
578895d91c2d3fb8432793fc6f3ba277_JaffaCakes118.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral3
Sample
578895d91c2d3fb8432793fc6f3ba277_JaffaCakes118.apk
Resource
android-x64-arm64-20240514-en
Malware Config
Targets
-
- Target 578895d91c2d3fb8432793fc6f3ba277_JaffaCakes118
- Size 3.4MB
- SHA256 68e71cdf7ed6923046c1eea13355cb37460c8249d48f09ef477fab65e79ca9a9
- MD5 578895d91c2d3fb8432793fc6f3ba277
- SHA1 fabed40f56da106656255069a1c9542d1662f5fc
- SHA512 3a2c7610038b57cb06ae82ec67323bc0e40ef6d906a05a3a6df941f7b6d0dd680da2974613984be28d8fe1a8f295e3dd57672a11f270e0f0c9c9678e796ef78f
- SSDEEP 98304:9nbwpw2KMyNW2kEA+sBzh/pYJG0mU0I/OZmSFy:9nUZhuvpvOnFy
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Checks if the Android device is rooted.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Registers a broadcast receiver at runtime (usually for listening for system events)
-
Checks if the internet connection is available
-
Queries the unique device ID (IMEI, MEID, IMSI)
-
Reads information about phone network operator.
-
Schedules tasks to execute at a specified time
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.