Overview
overview
8Static
static
665bddd9e27...18.apk
android-9-x86
8__xadsdk__...__.apk
android-9-x86
__xadsdk__...__.apk
android-10-x64
__xadsdk__...__.apk
android-11-x64
bdxadsdk.apk
android-9-x86
bdxadsdk.apk
android-10-x64
bdxadsdk.apk
android-11-x64
gdtadv2.apk
android-9-x86
gdtadv2.apk
android-10-x64
gdtadv2.apk
android-11-x64
General
-
Target
65bddd9e2716631e90b9031f0724798e_JaffaCakes118
-
Size
24.8MB
-
Sample
240522-c8243aaa7t
-
MD5
65bddd9e2716631e90b9031f0724798e
-
SHA1
931ece28c4a58501421b6ac308edcac94ff0ae9f
-
SHA256
cbcc84eb6e58607cf19c3ec8b5db0ddb75856a5720e0fca44f62e13c1667dae7
-
SHA512
b5e6676d763ba65744557048f24de084f9141887a95e3af431cf1a2144af8db88461e48b9ac3c49d8cd380545a9711850ca7597870631758bc2cd5b6a94aec18
-
SSDEEP
786432:iNhyNLHO/E2Vks20C/NjE1q2nJ0Iv0x2EkZGKM4vjhJ+:inyNLHKJGs20UEI2w2Ekg4lk
Static task
static1
Behavioral task
behavioral1
Sample
65bddd9e2716631e90b9031f0724798e_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
__xadsdk__remote__final__.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral3
Sample
__xadsdk__remote__final__.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral4
Sample
__xadsdk__remote__final__.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral5
Sample
bdxadsdk.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral6
Sample
bdxadsdk.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral7
Sample
bdxadsdk.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral8
Sample
gdtadv2.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral9
Sample
gdtadv2.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral10
Sample
gdtadv2.apk
Resource
android-x64-arm64-20240514-en
Malware Config
Targets
-
-
Target
65bddd9e2716631e90b9031f0724798e_JaffaCakes118
-
Size
24.8MB
-
MD5
65bddd9e2716631e90b9031f0724798e
-
SHA1
931ece28c4a58501421b6ac308edcac94ff0ae9f
-
SHA256
cbcc84eb6e58607cf19c3ec8b5db0ddb75856a5720e0fca44f62e13c1667dae7
-
SHA512
b5e6676d763ba65744557048f24de084f9141887a95e3af431cf1a2144af8db88461e48b9ac3c49d8cd380545a9711850ca7597870631758bc2cd5b6a94aec18
-
SSDEEP
786432:iNhyNLHO/E2Vks20C/NjE1q2nJ0Iv0x2EkZGKM4vjhJ+:inyNLHKJGs20UEI2w2Ekg4lk
-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries information about the current nearby Wi-Fi networks
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
-
Registers a broadcast receiver at runtime (usually for listening for system events)
-
Checks if the internet connection is available
-
Reads information about phone network operator.
-
Schedules tasks to execute at a specified time
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
-
-
-
Target
__xadsdk__remote__final__.jar
-
Size
83KB
-
MD5
63fdef103e88af155bed4d6d466964e4
-
SHA1
5a1be20892e18c536d0d883a5bf1462ea216bebd
-
SHA256
cfcf91ea26d1be5b17fc3757ef0e90942c078f4e8cdd88c7e72db6f260978de8
-
SHA512
8f299787a5254ade32d8cfaa04758a16f8a6f17e24bd60e90afc4b20382f6abb78a098e1104799c1c462c2237ac67b2a5b5ab4cba62c8c3cdc3a4d8a4cc13709
-
SSDEEP
1536:nlwzW+Faqlh7+uLyVFkke/mynCKQxsOxaG5Y1wAK1btK203sYIRwQHY6Adtu0BqC:n8FdT5yLjep5Qxs0GQ1btZiDI2Z6wuCL
Score1/10 -
-
-
Target
bdxadsdk.jar
-
Size
192KB
-
MD5
f2429b0af41f9121486badd960ada5ed
-
SHA1
ba311798a27c3ccf05aa054ebf56f723d54cf0d3
-
SHA256
7629e4704834ca162c1ad659266f7ff1a5849122644a01b96c367cb910c5a3c2
-
SHA512
ba2c033d1da143f94378cfc9c47d7baa569a08504372582702a1d415b529c2339b592af618524f2a35689ac37e8e481f29880f9c4cfadec192ad61e233fce26e
-
SSDEEP
3072:ZVNVz/qkEhxRQeXUWHWnokZzq/7teky3K+17YGIRTc/bx/SrN1kEPPp1CNwPQZNi:ZVjwfRp1MW/u60GezxCkWKNbEBR
Score1/10 -
-
-
Target
gdtadv2.jar
-
Size
230KB
-
MD5
33aeb27eefc5ae7838f01186e27d8816
-
SHA1
2a7ef64266577916f05cc841c9f977ca8a34568f
-
SHA256
c6a8f2838c910a50b56bddad227ebed00b8b32a6869a432c83964b1150ad2c59
-
SHA512
ebd8ccc5750aa1c2a28e849149d0ef3d1c997479008a803a931ea10c82bd99d90797a99329690cbea6cbc18d45bbe481a5576abfe3ca8afc96dbb3974a0e00c5
-
SSDEEP
6144:B8Obhi9RAdTKqZVGee8QXMLzKb/n4BQk+m:BbhiTAEQeVsWrn4BUm
Score1/10 -
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Scheduled Task/Job
1Defense Evasion
Download New Code at Runtime
1Virtualization/Sandbox Evasion
2System Checks
2