General
-
Target
65c77a864308c98ebfbeaab23c8296d2_JaffaCakes118
-
Size
29.9MB
-
Sample
240522-dg4n9aac9t
-
MD5
65c77a864308c98ebfbeaab23c8296d2
-
SHA1
016337273ca19db2fabbf36e8c4cd6f9c66c3299
-
SHA256
ce4fa1167a93bb89c1a3f24d3af329e0005f54c6d0947ea37fa800749cf6515e
-
SHA512
b6140b642cca42a602fd76defddd97545c5742d3c5f5f3c003d529c997b3acac608a40ef5d380f2475cbae48968f84c3bad4f316ae351c71ca5f50ec57919ae8
-
SSDEEP
786432:sXU8LrRq0o9wJiVQbC/Y2wxDjfSQ5oc+J3i7QomruYr1f08LT0x:WTRq0o9wQICWDSQ5oc43Y7mrJ5/sx
Static task
static1
Behavioral task
behavioral1
Sample
65c77a864308c98ebfbeaab23c8296d2_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Malware Config
Targets
-
-
Target
65c77a864308c98ebfbeaab23c8296d2_JaffaCakes118
-
Size
29.9MB
-
MD5
65c77a864308c98ebfbeaab23c8296d2
-
SHA1
016337273ca19db2fabbf36e8c4cd6f9c66c3299
-
SHA256
ce4fa1167a93bb89c1a3f24d3af329e0005f54c6d0947ea37fa800749cf6515e
-
SHA512
b6140b642cca42a602fd76defddd97545c5742d3c5f5f3c003d529c997b3acac608a40ef5d380f2475cbae48968f84c3bad4f316ae351c71ca5f50ec57919ae8
-
SSDEEP
786432:sXU8LrRq0o9wJiVQbC/Y2wxDjfSQ5oc+J3i7QomruYr1f08LT0x:WTRq0o9wQICWDSQ5oc43Y7mrJ5/sx
-
Checks if the Android device is rooted.
-
Checks known Qemu files.
Checks for known Qemu files that exist on Android virtual device images.
-
Checks known Qemu pipes.
Checks for known pipes used by the Android emulator to communicate with the host.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries information about the current nearby Wi-Fi networks
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
-
Queries the phone number (MSISDN for GSM devices)
-
Registers a broadcast receiver at runtime (usually for listening for system events)
-
Checks if the internet connection is available
-
Reads information about phone network operator.
-
MITRE ATT&CK Mobile v15
Defense Evasion
Download New Code at Runtime
1Virtualization/Sandbox Evasion
4System Checks
4