Overview

overview

7

Static

static

6

6754ec16a0...18.apk

android-9-x86

7

6754ec16a0...18.apk

android-10-x64

7

__xadsdk__...__.apk

android-9-x86

__xadsdk__...__.apk

android-10-x64

__xadsdk__...__.apk

android-11-x64

alipay_msp.apk

android-9-x86

1

alipay_msp.apk

android-10-x64

1

gdtadv2.apk

android-9-x86

gdtadv2.apk

android-10-x64

gdtadv2.apk

android-11-x64

qhad_dynamic1113.apk

android-9-x86

qhad_dynamic1113.apk

android-10-x64

qhad_dynamic1113.apk

android-11-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6754ec16a09d6d635d8c0355cecdf4f1_JaffaCakes118

  • Size

    8.0MB

  • Sample

    240522-p647vscb74

  • MD5

    6754ec16a09d6d635d8c0355cecdf4f1

  • SHA1

    d68d04111e9ca2aed2c38024ef9d8477e88ee7eb

  • SHA256

    fcde5c680f4604d1da7b4d032fdb4ec28090cd2fe3c539e5fefb70328336c7a3

  • SHA512

    2a306f9507ef5953f2ccd628b2d64d58bfedfcc500805aed00622b0fcfc01d156b67743a00aa3121447ef870dc4bcc3acfaee598063d26c176404a4930a00081

  • SSDEEP

    196608:yOuWRntxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxk0xcnL1sfJbVZUhmcD0:/uWXxxxxxxxxxxxxxxxxxxxxxxxxxxxF

Score
7/10
androiddiscoveryevasionimpactpersistence

Malware Config

Targets

    • Target

      6754ec16a09d6d635d8c0355cecdf4f1_JaffaCakes118

    • Size

      8.0MB

    • MD5

      6754ec16a09d6d635d8c0355cecdf4f1

    • SHA1

      d68d04111e9ca2aed2c38024ef9d8477e88ee7eb

    • SHA256

      fcde5c680f4604d1da7b4d032fdb4ec28090cd2fe3c539e5fefb70328336c7a3

    • SHA512

      2a306f9507ef5953f2ccd628b2d64d58bfedfcc500805aed00622b0fcfc01d156b67743a00aa3121447ef870dc4bcc3acfaee598063d26c176404a4930a00081

    • SSDEEP

      196608:yOuWRntxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxk0xcnL1sfJbVZUhmcD0:/uWXxxxxxxxxxxxxxxxxxxxxxxxxxxxF

    Score
    7/10
    discoveryevasionimpactpersistence

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

      evasiondiscovery

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

      discovery

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

      discovery

    • Queries the phone number (MSISDN for GSM devices)

      discovery

    • Registers a broadcast receiver at runtime (usually for listening for system events)

      persistence

    • Checks if the internet connection is available

      discovery

    • Queries the unique device ID (IMEI, MEID, IMSI)

      discovery

    • Reads information about phone network operator.

      discovery
    behavioral1behavioral2

    • Target

      __xadsdk__remote__final__.jar

    • Size

      83KB

    • MD5

      607e65052147713115dd87f0866d504c

    • SHA1

      5ff2a1c2ebedeb61236c56edfde6406828a05c6c

    • SHA256

      fe2fe2810faab43ae935927bfde6faafb8c74532f760afbecff9585d4404e741

    • SHA512

      2bc7144ac0c6dfbcf097f778ee110405d9c58f4fc4901356c2cf2622d7a4f6b12ce30a51f168962a8c81fbab9c46a65c2b219633dd2a80cc345dbf255cebf2a1

    • SSDEEP

      1536:eKSS1UbomStT19s4G0/GZzgrF2nPOgfbexVK8RV+0XUv5VzUxwh3MPeUivu5iy:DSYsStT1ZT/ugrFsmgsHWzUxq3MPeUi8

    Score
    1/10
    behavioral3behavioral4behavioral5

    • Target

      alipay_msp.apk

    • Size

      748KB

    • MD5

      d06ea38e4210a87d6b96f8b0491df677

    • SHA1

      3ba573396398757088e559a9d372049a377eb05a

    • SHA256

      76a24f83ad15586ff9a2081e420a707be9ddb0b5047e5b6de5974c41624ff2c1

    • SHA512

      3d43e5bfad2b703a804a53048b6a88228a11fb80ac641d6594f774cc07f6c7367e0ee80b29966d02c9206542f467f55b0f1ddbbfef0ec372256314a7d1071f30

    • SSDEEP

      12288:IjRAsoln+WMB1EgrGERh4xWgtSM7vXrRCn4I5p2Cnfv:IjRApZ+WM7yER61P7jw4IGSfv

    Score
    1/10
    behavioral6behavioral7

    • Target

      gdtadv2.jar

    • Size

      88KB

    • MD5

      0586f3074966b353fe050ec4055ca09c

    • SHA1

      645839dc107ba400711b8f4d8e4495dc29ac8ee0

    • SHA256

      e365ac88dc01033ccf02fe965d5e1eee9044c4ca1a3d9d96085be6a427a5274a

    • SHA512

      e76d878ec99c64cff35a11a5837237206bb02b1cc2d35ff2c0f03c72519bc19813138f54a6aca6c775b33de532a011dee7949ecddb7b57e4264380d70b81e4a5

    • SSDEEP

      1536:ZIyPme+AtVhpPhvh8Ba1e6Z5KgXJMfl24RnuFo398/FhluO4HyafAtQOz672r:9OefrzPhyh0KgXJ2l2nqt8/FhwfWQ1y

    Score
    1/10
    behavioral10behavioral8behavioral9

    • Target

      qhad_dynamic1113.jar

    • Size

      107KB

    • MD5

      3a06586ad5987b00b4a73759e61b126a

    • SHA1

      36a769a65efb56582e39dbce9c506795e9594fe7

    • SHA256

      2bfa01452d94c5cfecb0d2e9aa5488c59077d2f57736afa824a9a8c6bc75cbc9

    • SHA512

      97cb126fbb49b63c220eb3088e4bfe04f16bcc3bac75d0c8e8ab6d0d1da94522b3962002ffd8fc73a46c4de4b54929d5129d892da67173aae24f57d23dfd1572

    • SSDEEP

      3072:AeOnptLKufnZall64CrZbUXFn/Q+jJxLF:SKknxNV+9xLF

    Score
    1/10
    behavioral11behavioral12behavioral13

MITRE ATT&CK Matrix

Tasks