General

  • Target

    59a7a9cb6b7592ffb21e4e2cffb9b2aa_JaffaCakes118

  • Size

    31.2MB

  • Sample

    240519-k85tysbf6z

  • MD5

    59a7a9cb6b7592ffb21e4e2cffb9b2aa

  • SHA1

    f6aa67611e67470138018bcc7cae36dd2a01f8cb

  • SHA256

    1b3fa20851c56c6fdd3e3ac5592981018af1c4e5fcfa9d03299cb94ee4e6b51a

  • SHA512

    ccb1c61cdaa5d3589288754f0c04d4ec8fed52936d327b529eef8660086944ea634958b3a6c39cd1df048e3dc226f68d2dff59b32d7d59d2f9ff39cce1d5c944

  • SSDEEP

    786432:skCToZlEg7V6Z9JhpavvItZsLFvulBwHMb+bKT:sSlESVe0AuduLwHcj

Malware Config

Targets

    • Target

      59a7a9cb6b7592ffb21e4e2cffb9b2aa_JaffaCakes118

    • Size

      31.2MB

    • MD5

      59a7a9cb6b7592ffb21e4e2cffb9b2aa

    • SHA1

      f6aa67611e67470138018bcc7cae36dd2a01f8cb

    • SHA256

      1b3fa20851c56c6fdd3e3ac5592981018af1c4e5fcfa9d03299cb94ee4e6b51a

    • SHA512

      ccb1c61cdaa5d3589288754f0c04d4ec8fed52936d327b529eef8660086944ea634958b3a6c39cd1df048e3dc226f68d2dff59b32d7d59d2f9ff39cce1d5c944

    • SSDEEP

      786432:skCToZlEg7V6Z9JhpavvItZsLFvulBwHMb+bKT:sSlESVe0AuduLwHcj

    Score
    7/10
    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Checks if the internet connection is available

    • Listens for changes in the sensor environment (might be used to detect emulation)

    • Target

      MiGameCenterSDKService.apk

    • Size

      5.2MB

    • MD5

      f32ab0ab2ed58691ba1f4fbd46be3506

    • SHA1

      89b2abe5a52714b55e7a6b5245f786f7be6d23f9

    • SHA256

      25ee37926cb10bf50f51ce817513059ade7ecbdf589142ab05e56ee2dcc94fd2

    • SHA512

      a75e0a12d1c216fc528577d1ef52d81e597e259f114ca8fb2af8fb9329cad1c86636408bb55b9bb5bb08583df96615f54590c142a8a736f9a089e322aa890e46

    • SSDEEP

      98304:ayrBRZZz1VGiDp05BrS0FTS40PY7lzYga7qYcsnsnEX/n1PI3:H1LZJ/pmBrBS45lU7qBssnEP+

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks if the internet connection is available

    • Reads information about phone network operator.

    • Target

      unicom_resource.dat

    • Size

      45KB

    • MD5

      b7b9f657da1f868a6b321dc2e6761eda

    • SHA1

      1f6a3a5f6af9ecabaa4018f747988cda7b60ca6c

    • SHA256

      a491c5e41b81127ff86d9ac9a5c23b3c63a026d5ea2e464a1d615e3b0225c1b9

    • SHA512

      5bb939512d4c4403896c87922974b99bc60755f7ee2a3840c5faeffd146b4dee97e089f808b3df25fa3041236ef1f63c78dd4c4383c0ab8e734542638033b003

    • SSDEEP

      768:foUlrwIc3/D+PM9pdN0KIv+ciFWAkEsDVop56mAlNZ6B/pEBTb7PZ6dkB1VXN65R:foUJwIAD+Cpd6KZilNZ6B/pgH7x4kB9A

    Score
    1/10

MITRE ATT&CK Mobile v15

Tasks