General

  • Target

    63bc63e55d813cb39601f4749cbc0caa_JaffaCakes118

  • Size

    6.7MB

  • Sample

    240521-sjxq2saa26

  • MD5

    63bc63e55d813cb39601f4749cbc0caa

  • SHA1

    2191425dfe4ed777971586b6c2bc4e18935a43df

  • SHA256

    e87144a189ca3dcda3e54eb61a94940279df93043a46ae1531ed7c8025596672

  • SHA512

    c096198d5997f577237a09d62903093cde53d2ce7ddaa04fec375cf578282ed7c494dd2965180d9b60e04fec9a5c2bcd75a70b3ec21da5d526af861d36a20ca4

  • SSDEEP

    98304:JjtWXMgP+ILzwmMMF0qHzIKGtL/DG8sflRhhtRaiaTjimB4kcoHG9B0QN77bAywJ:J5pgP+FmHF08YivRFaPnBzmr0QN7b4

Malware Config

Targets

    • Target

      63bc63e55d813cb39601f4749cbc0caa_JaffaCakes118

    • Size

      6.7MB

    • MD5

      63bc63e55d813cb39601f4749cbc0caa

    • SHA1

      2191425dfe4ed777971586b6c2bc4e18935a43df

    • SHA256

      e87144a189ca3dcda3e54eb61a94940279df93043a46ae1531ed7c8025596672

    • SHA512

      c096198d5997f577237a09d62903093cde53d2ce7ddaa04fec375cf578282ed7c494dd2965180d9b60e04fec9a5c2bcd75a70b3ec21da5d526af861d36a20ca4

    • SSDEEP

      98304:JjtWXMgP+ILzwmMMF0qHzIKGtL/DG8sflRhhtRaiaTjimB4kcoHG9B0QN77bAywJ:J5pgP+FmHF08YivRFaPnBzmr0QN7b4

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries account information for other applications stored on the device

      Application may abuse the framework's APIs to collect account information stored on the device.

    • Queries the mobile country code (MCC)

    • Queries the phone number (MSISDN for GSM devices)

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks if the internet connection is available

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks