a5a8183276a405a3c096236c31e4b2ab17e988164df4d24e668a964062de2c28

General

Target

66715b3123fd0cdc80e6412a358bf2bf_JaffaCakes118
Size

25.0MB
Sample

240522-h4h4aaga35
MD5

66715b3123fd0cdc80e6412a358bf2bf
SHA1

bbb681bd94106bd504edd1d0ea2a1e7e75016bd7
SHA256

a5a8183276a405a3c096236c31e4b2ab17e988164df4d24e668a964062de2c28
SHA512

c253bfbbeeca4ac3baa25cf8e68fa4c0bc74599acf1a356296e5f002f6bce5e2281fbf1686ae1c60fa4ebf1a2dac60a6bca8f229e90d9eaaed3ff7c4db678de0
SSDEEP

393216:HKmqaLFe3meSCNnxlGDUCVSpH/JL1rMxbSzS7nqYDTo1IGEZNt1/0rSZ4kC4NY:HOaZtUCVStJL1r+SStTo1IlpMqJCJ

Score

8^/10

Malware Config

Targets

- Target
  
  66715b3123fd0cdc80e6412a358bf2bf_JaffaCakes118
- Size
  
  25.0MB
- MD5
  
  66715b3123fd0cdc80e6412a358bf2bf
- SHA1
  
  bbb681bd94106bd504edd1d0ea2a1e7e75016bd7
- SHA256
  
  a5a8183276a405a3c096236c31e4b2ab17e988164df4d24e668a964062de2c28
- SHA512
  
  c253bfbbeeca4ac3baa25cf8e68fa4c0bc74599acf1a356296e5f002f6bce5e2281fbf1686ae1c60fa4ebf1a2dac60a6bca8f229e90d9eaaed3ff7c4db678de0
- SSDEEP
  
  393216:HKmqaLFe3meSCNnxlGDUCVSpH/JL1rMxbSzS7nqYDTo1IGEZNt1/0rSZ4kC4NY:HOaZtUCVStJL1r+SStTo1IlpMqJCJ
Score

8^/10

banker discovery evasion impact persistence
- Checks if the Android device is rooted.
  evasion
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries the mobile country code (MCC)
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Checks if the internet connection is available
  discovery
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
- Reads information about phone network operator.
  discovery
behavioral1
- Target
  
  amap_resource1_0_0.png
- Size
  
  24KB
- MD5
  
  94a2a5f84a3fd6f0fd9134708ae1b81e
- SHA1
  
  1e21afaa48ed86cb31aaf7b17c3514315364cc99
- SHA256
  
  fc0c21884d4edfa4d93282139a309f204b27271a111a5b158edbc048f730b461
- SHA512
  
  24a175d15cb5cf8d23f0d53b004ed5c9a47646129c816fcae1b46aedabd95bb2c6dd2958d39d6f98f36dec3cd55d6af2d9b8f7013ced4b37a30db566e9a44923
- SSDEEP
  
  384:SevEWnTSCwukBdJ4dVCHyP7MPi3oqYXgnJk:3vEWnSue4+Sf3opQa
Score

1^/10
behavioral2 behavioral3 behavioral4
- Target
  
  autonavi_Resource1_1_0.png
- Size
  
  1016KB
- MD5
  
  ca416b9a195afd3fad887b83b5c4338e
- SHA1
  
  3c2fe205b7c4daa8eba4139fdfd4a88c46b135e4
- SHA256
  
  eefa1beadbd54e830187eec627b1145767a223a75e0a51142b809adff26d6e73
- SHA512
  
  612f6d24c7b2e85f8a41648df6a2256204363c9d6195f738ad15e2c7c0bd9993d4c24c27cf1e006ad8637274ed35d916ca251e1d7c2704861ce5e758e4ff337d
- SSDEEP
  
  12288:qXo3+VPNODQ/zDuXUE3bc6vf6Sk42buEkB2yU5F3v:yMEO8/vxELc6vf6yjLwyUPv
Score

1^/10
behavioral5 behavioral6 behavioral7