General
-
Target
6555c2813e90cb0e18a8cd418852080a_JaffaCakes118
-
Size
15.2MB
-
Sample
240522-armlyaeh2s
-
MD5
6555c2813e90cb0e18a8cd418852080a
-
SHA1
e0b21867a543f72cc9a90265dac26a610f8beac5
-
SHA256
adbecc19ba66cfb85050f5c31cafdd40f8fc0cced767698121fc8ede2a2f35c5
-
SHA512
71a4f4e010b911fdcbc47385a8de2da799e9fda0756b25284313c62acdaa4514202c708c3d8cc0fd95c9cba5249b83f0838f19ac343dd92bd00b37117e834f72
-
SSDEEP
393216:w+IomxdZ/4saiAmRyESRhPT87y3mfZb57Ulz2Hi25rzz2KgITfN5Z:wWgZ/tqmRyESR1TmyWfHEzI/zF
Malware Config
Targets
-
-
Target
6555c2813e90cb0e18a8cd418852080a_JaffaCakes118
-
Size
15.2MB
-
MD5
6555c2813e90cb0e18a8cd418852080a
-
SHA1
e0b21867a543f72cc9a90265dac26a610f8beac5
-
SHA256
adbecc19ba66cfb85050f5c31cafdd40f8fc0cced767698121fc8ede2a2f35c5
-
SHA512
71a4f4e010b911fdcbc47385a8de2da799e9fda0756b25284313c62acdaa4514202c708c3d8cc0fd95c9cba5249b83f0838f19ac343dd92bd00b37117e834f72
-
SSDEEP
393216:w+IomxdZ/4saiAmRyESRhPT87y3mfZb57Ulz2Hi25rzz2KgITfN5Z:wWgZ/tqmRyESR1TmyWfHEzI/zF
Score1/10 -
-
-
Target
com.qihoo.appstore.notification.controller.apk
-
Size
58KB
-
MD5
0a98962413bee26ac7f154ed6554eb45
-
SHA1
e5f183c2956f1042316898be4e5660b66f354976
-
SHA256
b5a232b73d08d475bcdbe8b5a348294d5d748c15bdf320e501aa6d9d7906ba30
-
SHA512
951f10fb213f9751d2dd1082595749817532097c2a0bc3a81db492a4ef3c1ebafc6061c9059bd9156d5553893b11e96e36993762543419729eef3d9b15d36d08
-
SSDEEP
1536:GL7uBV4TbFwgb4nOXzypFRRF0mN3+QXBZLaMyv05v7:GL7m8wkz4h0mBzZOMtJ
Score1/10 -
-
-
Target
com.qihoo.appstore.pay.lite.apk
-
Size
260KB
-
MD5
2440eb04289baccc027a4ec684d2a14e
-
SHA1
4727a55de77c8e779849f6976084c4fa8ace3830
-
SHA256
fd1fa6bda15e3145f109a643032a43c6d6f0576e2827d15685c934b82e2137b2
-
SHA512
c09a345d9aaeae7298ca4a0b8533627b4d9d652212b5e76a37a09db3cafa29e3c7163c4e0fbd4f05ba03a781a6f7037609fd77c1bc03cff69cd4dc33a0a37719
-
SSDEEP
6144:garGZOh0LeG1d3rUjjCXf7FyZwRMWgigaHjUNA2OcMMmIWmKVQlQ:gYADd3rMWinWgi1INyNMcmo
Score7/10-
Checks memory information
Checks memory information which indicate if the system is an emulator.
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
-
-
Target
com.qihoo.plugin.splash.apk
-
Size
466KB
-
MD5
e698ea93bcff753c3d622f219540ff9d
-
SHA1
2e85350605b7a6c73e806b76998e4544a88d9664
-
SHA256
777a5341d270c39738cd32ea4c2ab6af820e443d5a45ee75fe429249f464bc13
-
SHA512
864fb4af537b61761f631fe30929366b66f43fce51245a26418ca3ab52462401360bfeac5bf584521ac0ab8ab6f56e1c9c303276cd712cfcc2b3105c33b85dd8
-
SSDEEP
12288:XS5P7PksxhWBhuxi+gq6NMiB4riCjL9dZ+N/sb4IFAkv6b9:qPkOuhv7q6NMNrdTkN/sb/eb9
Score8/10-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Reads information about phone network operator.
-
-
-
Target
tcore.jar
-
Size
153KB
-
MD5
bc3cb0eef1d19c47cf3f1a2211258aee
-
SHA1
7f10b763a43b6900cd9925b014c1a794994d37dd
-
SHA256
79e1eee2d72cb40e0c931ed08e609891a41b0a2802d6e0b98abd7970238b4eee
-
SHA512
51f66294dbc34d4c618e2b16449c47f73734f1d5a57d2e40927ff5ab808604206fda84af29653cb9b018f30749e54a0a481e796cfc7b016a317ff7e83860df86
-
SSDEEP
3072:GYRLLNEK/MG/+UL3TMPAi7GGawe/JchKfbNewyfVF4BTP7rLqchL:GYLLNEkMG/+g27GGze/JSi5IuHLBL
Score1/10 -
-
-
Target
com.qihoo360.mobilesafe.appwatcher.apk
-
Size
65KB
-
MD5
71cede5303643de961d50f34390c297a
-
SHA1
18131b8f4d840085fb845d8f3474d1df72ec3974
-
SHA256
08bc39e68aa864433a5c0e2cc5f003d65c1efc412d5ccc40a2608a9a1b6184c0
-
SHA512
58e0daf411b887ea532c832ccbce1555edfb13bedc11cb785aa9f0339ae5c45bf5ff2f5d3d5157813e071609a40f2b8d9b21bdd1059c3646fe34ee354b46c807
-
SSDEEP
1536:Ix+ySYt/ciJSmfirXhlFa72jn410ODEMpBVpAvzlrJ7jjHrPTSS/DIYolvA:IEcczmfirRpjn4q6azr7fHJ9v
Score1/10 -
-
-
Target
com.qihoo360.mobilesafe.chargescreensvc.apk
-
Size
150KB
-
MD5
da300f9190d20a13eba31839162292f1
-
SHA1
7bc735f05e558c0e70bb4c9dfcc81c5b70975500
-
SHA256
9250610e75fb8296469df81483f9d38ac87b65d351f4d049f7c13fc057b6702f
-
SHA512
0a755dcfc6cf7d48ac608ce505acf31d50bb8cd0f6bf4aff5c087bc32ba78a93aef7d792f9b5a2dd566ef6080be7cf4fb9243555ffa1633dfe8ea9c8f118140d
-
SSDEEP
3072:BorAAjelZDmcsQWPt9Yd9og6kXrcqZWA0u1N9Ph0WCl7IMo4:BorQGxV9q9og6kX9Cudh8IMD
Score1/10 -
-
-
Target
com.qihoo360.mobilesafe.downloadlist.apk
-
Size
1.0MB
-
MD5
0ac6fea877f47966445594b22ecf8131
-
SHA1
feb12dfb7010b39bc034e04243c3e925d20bb4bb
-
SHA256
24b0d0e590859ebb5f04d6bc4ad63b7721592a8216b25af7427f6fe85e5979f1
-
SHA512
f07efeabbcf3973c8a2f12db583d7e32517c62e90a0073fddec7ebe5120d84afb9b2a2c1afccee4ca321a295432b6e5aed1a4a0e6ce7c9081465c64a2bbb26d9
-
SSDEEP
24576:gN/BuFJXJSzpwB56yx/TQhBQqGpH+LSM5YNfukWSiBjSOs:gfuvMzpwB56ydcI8LS2SfeSigN
Score1/10 -
-
-
Target
com.qihoo360.mobilesafe.homepage.apk
-
Size
1.7MB
-
MD5
59dd4a135a3312a805046bfc75e195e4
-
SHA1
406fa4a5fff3a79e8083f5d41cc357c24c4f626c
-
SHA256
ad1c9a903cafa4f850181f79323e744a1817d936bc29ee870422727e79deed5c
-
SHA512
a2aa88fb3bd18f22e9b269c82639abe3be6703d9bf278d9dbb859d83e8c242aa70d0ef5ff31b0e38dcb129741e95452e63fa7254e420152e11979e828549dbc0
-
SSDEEP
49152:5/Tn0ya5YVN/b3f/6ydci1CyP+l5/z31IEiPC:VTn3a5Yjbn6ydJCk+DlIEiq
Score1/10 -
-
-
Target
com.qihoo360.mobilesafe.recommend.apk
-
Size
2.0MB
-
MD5
8969baa37eee728c88987f820e02ee29
-
SHA1
078b72bd9860038cdaed74568de8cd98cabfcd00
-
SHA256
d221c6c694ba99ebbdbdde5ff719392d102c79e03b4f3d331e03db4af5c9ef47
-
SHA512
df3e32f826ec343e8255245bffe7297af6d65ae754d2b8c58cec90b094720fe3b964f6d06ef3fc3b1b0c1905be43869f55b9a4c117679a294898adeccac30d74
-
SSDEEP
24576:SQpytUMwq5KElUCuE7Hwdszy2Nt+CALOfKQB2LhOYcJP3RPtoUG4eBmHFFzJf3WF:S0i5NuEjmcNPKOJBwknPVmUxysFzJf34
Score1/10 -
-
-
Target
com.qihoo360.mobilesafe.search.apk
-
Size
721KB
-
MD5
2cfae9885ad5c84919215db06c374b15
-
SHA1
c446abaadc538c4dd3deb142ea07aa85a646acba
-
SHA256
cb25ad6b250ebee221549c16461c5cb533a034a18d3df5f41478ed9af48505d2
-
SHA512
9b59e76f3a7118bc28b178f5d600576a309d335dbb99ce9d844da74573e58f4e0b1cda6e2879a5a44f3687150084ad6a70b4a49168f8710f64e36313bff411f8
-
SSDEEP
12288:8z6iVFo3ni2bUIwR+5RuNpBdLmmmmVSnOWB2E1Dv/JDnckFK25oIZA:8z/VFUni2R9apBtjVihZ/JDd6
Score1/10 -
-
-
Target
dmss_v2.jar
-
Size
126KB
-
MD5
aa64c54de3204df266353f78f8f92743
-
SHA1
f30391c3c576f3ad05cae309d4b3ed63759f140f
-
SHA256
a9d07897e42c42c15f27ac1e3a907072bce90aeed7cf70ad3c52ea020a2bb1ac
-
SHA512
a3be909d084d88dc1da4c0b0fd8dfbcc63d3149308f622b094fb1b9b4a47c2e5fe9633fd7354e2ce281d222fffcfdfd3896708cb398c81f12437aa8f0720690c
-
SSDEEP
3072:QWDEMmwiLvzgsHGEIqTriwmelZLoALvFchukchKC+8G/ee:pDpmwiJ2Ur7mhAL+kkcPG1
Score1/10 -