General

  • Target

    65bddd9e2716631e90b9031f0724798e_JaffaCakes118

  • Size

    24.8MB

  • Sample

    240522-c8243aaa7t

  • MD5

    65bddd9e2716631e90b9031f0724798e

  • SHA1

    931ece28c4a58501421b6ac308edcac94ff0ae9f

  • SHA256

    cbcc84eb6e58607cf19c3ec8b5db0ddb75856a5720e0fca44f62e13c1667dae7

  • SHA512

    b5e6676d763ba65744557048f24de084f9141887a95e3af431cf1a2144af8db88461e48b9ac3c49d8cd380545a9711850ca7597870631758bc2cd5b6a94aec18

  • SSDEEP

    786432:iNhyNLHO/E2Vks20C/NjE1q2nJ0Iv0x2EkZGKM4vjhJ+:inyNLHKJGs20UEI2w2Ekg4lk

Malware Config

Targets

    • Target

      65bddd9e2716631e90b9031f0724798e_JaffaCakes118

    • Size

      24.8MB

    • MD5

      65bddd9e2716631e90b9031f0724798e

    • SHA1

      931ece28c4a58501421b6ac308edcac94ff0ae9f

    • SHA256

      cbcc84eb6e58607cf19c3ec8b5db0ddb75856a5720e0fca44f62e13c1667dae7

    • SHA512

      b5e6676d763ba65744557048f24de084f9141887a95e3af431cf1a2144af8db88461e48b9ac3c49d8cd380545a9711850ca7597870631758bc2cd5b6a94aec18

    • SSDEEP

      786432:iNhyNLHO/E2Vks20C/NjE1q2nJ0Iv0x2EkZGKM4vjhJ+:inyNLHKJGs20UEI2w2Ekg4lk

    • Checks if the Android device is rooted.

    • Requests cell location

      Uses Android APIs to to get current cell information.

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks if the internet connection is available

    • Reads information about phone network operator.

    • Schedules tasks to execute at a specified time

      Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    • Target

      __xadsdk__remote__final__.jar

    • Size

      83KB

    • MD5

      63fdef103e88af155bed4d6d466964e4

    • SHA1

      5a1be20892e18c536d0d883a5bf1462ea216bebd

    • SHA256

      cfcf91ea26d1be5b17fc3757ef0e90942c078f4e8cdd88c7e72db6f260978de8

    • SHA512

      8f299787a5254ade32d8cfaa04758a16f8a6f17e24bd60e90afc4b20382f6abb78a098e1104799c1c462c2237ac67b2a5b5ab4cba62c8c3cdc3a4d8a4cc13709

    • SSDEEP

      1536:nlwzW+Faqlh7+uLyVFkke/mynCKQxsOxaG5Y1wAK1btK203sYIRwQHY6Adtu0BqC:n8FdT5yLjep5Qxs0GQ1btZiDI2Z6wuCL

    Score
    1/10
    • Target

      bdxadsdk.jar

    • Size

      192KB

    • MD5

      f2429b0af41f9121486badd960ada5ed

    • SHA1

      ba311798a27c3ccf05aa054ebf56f723d54cf0d3

    • SHA256

      7629e4704834ca162c1ad659266f7ff1a5849122644a01b96c367cb910c5a3c2

    • SHA512

      ba2c033d1da143f94378cfc9c47d7baa569a08504372582702a1d415b529c2339b592af618524f2a35689ac37e8e481f29880f9c4cfadec192ad61e233fce26e

    • SSDEEP

      3072:ZVNVz/qkEhxRQeXUWHWnokZzq/7teky3K+17YGIRTc/bx/SrN1kEPPp1CNwPQZNi:ZVjwfRp1MW/u60GezxCkWKNbEBR

    Score
    1/10
    • Target

      gdtadv2.jar

    • Size

      230KB

    • MD5

      33aeb27eefc5ae7838f01186e27d8816

    • SHA1

      2a7ef64266577916f05cc841c9f977ca8a34568f

    • SHA256

      c6a8f2838c910a50b56bddad227ebed00b8b32a6869a432c83964b1150ad2c59

    • SHA512

      ebd8ccc5750aa1c2a28e849149d0ef3d1c997479008a803a931ea10c82bd99d90797a99329690cbea6cbc18d45bbe481a5576abfe3ca8afc96dbb3974a0e00c5

    • SSDEEP

      6144:B8Obhi9RAdTKqZVGee8QXMLzKb/n4BQk+m:BbhiTAEQeVsWrn4BUm

    Score
    1/10

MITRE ATT&CK Mobile v15

Tasks