cbcc84eb6e58607cf19c3ec8b5db0ddb75856a5720e0fca44f62e13c1667dae7

Sharing

Copy URL Twitter E-mail

General

Target
65bddd9e2716631e90b9031f0724798e_JaffaCakes118
Size 24.8MB
Sample240522-c8243aaa7t
SHA256 cbcc84eb6e58607cf19c3ec8b5db0ddb75856a5720e0fca44f62e13c1667dae7
MD5 65bddd9e2716631e90b9031f0724798e
SHA1 931ece28c4a58501421b6ac308edcac94ff0ae9f
SHA512 b5e6676d763ba65744557048f24de084f9141887a95e3af431cf1a2144af8db88461e48b9ac3c49d8cd380545a9711850ca7597870631758bc2cd5b6a94aec18
SSDEEP 786432:iNhyNLHO/E2Vks20C/NjE1q2nJ0Iv0x2EkZGKM4vjhJ+:inyNLHKJGs20UEI2w2Ekg4lk
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Malware Config

Targets

- Target
  65bddd9e2716631e90b9031f0724798e_JaffaCakes118
- Size 24.8MB
- SHA256 cbcc84eb6e58607cf19c3ec8b5db0ddb75856a5720e0fca44f62e13c1667dae7
- MD5 65bddd9e2716631e90b9031f0724798e
- SHA1 931ece28c4a58501421b6ac308edcac94ff0ae9f
- SHA512 b5e6676d763ba65744557048f24de084f9141887a95e3af431cf1a2144af8db88461e48b9ac3c49d8cd380545a9711850ca7597870631758bc2cd5b6a94aec18
- SSDEEP 786432:iNhyNLHO/E2Vks20C/NjE1q2nJ0Iv0x2EkZGKM4vjhJ+:inyNLHKJGs20UEI2w2Ekg4lk
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

collection credential_access discovery evasion execution impact persistence
- Checks if the Android device is rooted.
  evasion
- Requests cell location
  Uses Android APIs to to get current cell information.
  collection discovery
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries information about the current nearby Wi-Fi networks
  Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Checks if the internet connection is available
  discovery
- Reads information about phone network operator.
  discovery
- Schedules tasks to execute at a specified time
  Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
  execution persistence
behavioral1
- Target
  __xadsdk__remote__final__.jar
- Size 83KB
- SHA256 cfcf91ea26d1be5b17fc3757ef0e90942c078f4e8cdd88c7e72db6f260978de8
- MD5 63fdef103e88af155bed4d6d466964e4
- SHA1 5a1be20892e18c536d0d883a5bf1462ea216bebd
- SHA512 8f299787a5254ade32d8cfaa04758a16f8a6f17e24bd60e90afc4b20382f6abb78a098e1104799c1c462c2237ac67b2a5b5ab4cba62c8c3cdc3a4d8a4cc13709
- SSDEEP 1536:nlwzW+Faqlh7+uLyVFkke/mynCKQxsOxaG5Y1wAK1btK203sYIRwQHY6Adtu0BqC:n8FdT5yLjep5Qxs0GQ1btZiDI2Z6wuCL
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral2 behavioral3 behavioral4
- Target
  bdxadsdk.jar
- Size 192KB
- SHA256 7629e4704834ca162c1ad659266f7ff1a5849122644a01b96c367cb910c5a3c2
- MD5 f2429b0af41f9121486badd960ada5ed
- SHA1 ba311798a27c3ccf05aa054ebf56f723d54cf0d3
- SHA512 ba2c033d1da143f94378cfc9c47d7baa569a08504372582702a1d415b529c2339b592af618524f2a35689ac37e8e481f29880f9c4cfadec192ad61e233fce26e
- SSDEEP 3072:ZVNVz/qkEhxRQeXUWHWnokZzq/7teky3K+17YGIRTc/bx/SrN1kEPPp1CNwPQZNi:ZVjwfRp1MW/u60GezxCkWKNbEBR
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5 behavioral6 behavioral7
- Target
  gdtadv2.jar
- Size 230KB
- SHA256 c6a8f2838c910a50b56bddad227ebed00b8b32a6869a432c83964b1150ad2c59
- MD5 33aeb27eefc5ae7838f01186e27d8816
- SHA1 2a7ef64266577916f05cc841c9f977ca8a34568f
- SHA512 ebd8ccc5750aa1c2a28e849149d0ef3d1c997479008a803a931ea10c82bd99d90797a99329690cbea6cbc18d45bbe481a5576abfe3ca8afc96dbb3974a0e00c5
- SSDEEP 6144:B8Obhi9RAdTKqZVGee8QXMLzKb/n4BQk+m:BbhiTAEQeVsWrn4BUm
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral10 behavioral8 behavioral9