General
- Target 65d62b4677d6c5892a3f7ad4d1a80968_JaffaCakes118
- Size 15.8MB
- Sample240522-dw4b2aae69
- SHA256 5a8e2df62e7931f08b291aa7869671441a0f28b75e35717f5f8ef5a374195122
- MD5 65d62b4677d6c5892a3f7ad4d1a80968
- SHA1 50c7fe6c444da0d5383d206ddef06bc66a1952e3
- SHA512 cfd639cfb8321f3eedb14745835a68075399044980cc13b88d2328c0117e07f92202c9492be79cb74986997dcf36fb829797dafbb4b536c093837fabb21167ed
- SSDEEP 393216:178XKMmXKxZa1USQWjKdvvnbVzzljvA3F6J6wkIcYEB3SsZmi8N:17hKemWjKFVzz9vAq6hYEB3SsZmi8N
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
65d62b4677d6c5892a3f7ad4d1a80968_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
65d62b4677d6c5892a3f7ad4d1a80968_JaffaCakes118.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral3
Sample
plugin-deploy.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral4
Sample
plugin-deploy.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral5
Sample
plugin-deploy.apk
Resource
android-x64-arm64-20240514-en
Malware Config
Targets
-
- Target 65d62b4677d6c5892a3f7ad4d1a80968_JaffaCakes118
- Size 15.8MB
- SHA256 5a8e2df62e7931f08b291aa7869671441a0f28b75e35717f5f8ef5a374195122
- MD5 65d62b4677d6c5892a3f7ad4d1a80968
- SHA1 50c7fe6c444da0d5383d206ddef06bc66a1952e3
- SHA512 cfd639cfb8321f3eedb14745835a68075399044980cc13b88d2328c0117e07f92202c9492be79cb74986997dcf36fb829797dafbb4b536c093837fabb21167ed
- SSDEEP 393216:178XKMmXKxZa1USQWjKdvvnbVzzljvA3F6J6wkIcYEB3SsZmi8N:17hKemWjKFVzz9vAq6hYEB3SsZmi8N
- MD5 SHA1 SHA512 SSDEEP
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Queries the mobile country code (MCC)
Registers a broadcast receiver at runtime (usually for listening for system events)
Checks if the internet connection is available
Queries the unique device ID (IMEI, MEID, IMSI)
Reads information about phone network operator.
-
- Target plugin-deploy.jar
- Size 206KB
- SHA256 0fba8eedb44faf95448ed7e25bcba48b49aa981e1e1e154fcbd90e48447813a4
- MD5 02fe22caeb17a9d7c7f5c3914e3cda29
- SHA1 7e3293216263ab967ca6e9a3c55ba589444e3de7
- SHA512 020324dd3b38d6d75fbb54f18caf0bfdff38e27b0c18aa83989b53e9da96a6d6c780f281b21da8f1b41e3de1206306954dc9d1e42aa2dd12f500b66e04f4c647
- SSDEEP 6144:QVMQdIey/0Jl8L9umLtnWy6C0mNiEfWBm63:QVMbL/q2nL4g0mNXf7o
- MD5 SHA1 SHA512 SSDEEP
Score1/10
MITRE ATT&CK Mobile v15
Defense Evasion
Download New Code at Runtime
1Virtualization/Sandbox Evasion
2System Checks
2