274652bcd83b44a0817fc4918b4a4c45f2ab86e004c60008af27b88d6f223969

General

Target

667673537748c7f39b2b020846d5cf70_JaffaCakes118
Size

15.0MB
Sample

240522-h9em2sgc6x
MD5

667673537748c7f39b2b020846d5cf70
SHA1

ac069d1ecd18b0f13df6cdb1e3cac73d12455718
SHA256

274652bcd83b44a0817fc4918b4a4c45f2ab86e004c60008af27b88d6f223969
SHA512

668f1f746ef93b69072f231820f7326cab333b27c049b5e6630dcd549b6c2305064973f3b34b8ecc9a4d6d845f13b372a4c5c090497e72b95fe75aa7e3fc18f3
SSDEEP

393216:acl819X0DnS03pJvVVHgE0ren6FUkU8WpsEZYlV1bjQVt8JhGiyeoLv:kwJvVn0rqSVWpZYxb038JMiyr

Score

8^/10

Malware Config

Targets

- Target
  
  667673537748c7f39b2b020846d5cf70_JaffaCakes118
- Size
  
  15.0MB
- MD5
  
  667673537748c7f39b2b020846d5cf70
- SHA1
  
  ac069d1ecd18b0f13df6cdb1e3cac73d12455718
- SHA256
  
  274652bcd83b44a0817fc4918b4a4c45f2ab86e004c60008af27b88d6f223969
- SHA512
  
  668f1f746ef93b69072f231820f7326cab333b27c049b5e6630dcd549b6c2305064973f3b34b8ecc9a4d6d845f13b372a4c5c090497e72b95fe75aa7e3fc18f3
- SSDEEP
  
  393216:acl819X0DnS03pJvVVHgE0ren6FUkU8WpsEZYlV1bjQVt8JhGiyeoLv:kwJvVn0rqSVWpZYxb038JMiyr
Score

7^/10

persistence
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
behavioral1 behavioral2
- Target
  
  sg.apk
- Size
  
  10.7MB
- MD5
  
  83a8949d0fffdb5b3539ad8c70730705
- SHA1
  
  4f820db7ef653e2e5b59f00eb894f2390889ab19
- SHA256
  
  8107d6f60cc6881e49e26bd6731403b89150fd631c85f7e196676b62b73d5572
- SHA512
  
  f1cac5f8c0fbaf88ec5c20157d2171d97caf217ab817fcbbdc879fa8c1a694fd96c50a093dfa9f486c2756fbd7c5ba2769560742d19add673294abd2a42f1be4
- SSDEEP
  
  196608:lQynVGAijdeTTbriIypkKHOW5m36jcIhkYrMMZkTyTio8ci/s:lQ4VGAiIeIy1RIKjcIhhMmwsb
Score

8^/10

banker discovery evasion impact persistence
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries the mobile country code (MCC)
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Checks if the internet connection is available
  discovery
- Reads information about phone network operator.
  discovery
behavioral3
- Target
  
  spdex.jar
- Size
  
  760B
- MD5
  
  bd3722096241f5f437f9db5053261d02
- SHA1
  
  7208e0dff844800b57ee693e9f3c3f7cb4f908a9
- SHA256
  
  f8bffa2787d64e284dd4aa5ceb7ee65df5c8d6610396ab21ba321fd6753eacb4
- SHA512
  
  c2aaa80a549284f1950718a98e3832ba38344ccd2b0eeb4500ea305daf27a5f854ff73a09d4147509785c71b7c647053f22b04b086b9d725e6a286f2b04a8ea7
Score

1^/10
behavioral4 behavioral5 behavioral6