deb998eff5c1f1c261559356ebd0af8a991258a73f3bd73089f7c9880490ad1b

Sharing

Copy URL

Twitter E-mail

General

Target

676278f8f32877f7f2471ba4a130890e_JaffaCakes118
Size

10.7MB
Sample

240522-qkaa2acg49
MD5

676278f8f32877f7f2471ba4a130890e
SHA1

042859d9d17c10f38d5f45e49d1bac8975a167c7
SHA256

deb998eff5c1f1c261559356ebd0af8a991258a73f3bd73089f7c9880490ad1b
SHA512

29463c33b8056ae0bb1acc44b55da5a3921231b51b8a40747a15bba461620b9ac9e51cce7306ab3a573e1b8518f219db54f6cf960f13c66656995192ca311c0b
SSDEEP

196608:ONNWUIilRbaCxGzE0yz2Uip0rtwh+XQI3/yHsiJo3gycM7PlQ0XzqAac:mNjlvBxGznyyU805wIXQu/yHs1fdQ0Xt

Score

8^/10

Malware Config

Targets

- Target
  
  676278f8f32877f7f2471ba4a130890e_JaffaCakes118
- Size
  
  10.7MB
- MD5
  
  676278f8f32877f7f2471ba4a130890e
- SHA1
  
  042859d9d17c10f38d5f45e49d1bac8975a167c7
- SHA256
  
  deb998eff5c1f1c261559356ebd0af8a991258a73f3bd73089f7c9880490ad1b
- SHA512
  
  29463c33b8056ae0bb1acc44b55da5a3921231b51b8a40747a15bba461620b9ac9e51cce7306ab3a573e1b8518f219db54f6cf960f13c66656995192ca311c0b
- SSDEEP
  
  196608:ONNWUIilRbaCxGzE0yz2Uip0rtwh+XQI3/yHsiJo3gycM7PlQ0XzqAac:mNjlvBxGznyyU805wIXQu/yHs1fdQ0Xt
Score

8^/10

banker collection discovery evasion impact persistence credential_access
- Checks if the Android device is rooted.
  evasion
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Requests cell location
  Uses Android APIs to to get current cell information.
  collection discovery
- Requests cell location
  Uses Android APIs to to get current cell location.
  collection discovery evasion
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  evasion persistence
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries information about the current nearby Wi-Fi networks
  Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
  discovery
- Queries the mobile country code (MCC)
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Checks if the internet connection is available
  discovery
- Reads information about phone network operator.
  discovery
behavioral1 behavioral2
- Target
  
  aisdk_qtt.jar
- Size
  
  300KB
- MD5
  
  a5984f17e99ccf512ac016526d3ae675
- SHA1
  
  817ab70c6a2fce433f8b7d983cb78834aa01f876
- SHA256
  
  531b27cf5a9a30a4efde82c9728e1460d725703b89d3fb1147fa5b9a3e1a640c
- SHA512
  
  28febb57adea0db39d720701af468401cd6e1d27f6c820cb9d8e7bb2d85f26e9f76eafa33ce111bc2f4f75ee4c634531fc6e0b0e5d208255ad691d9ddd908cb2
- SSDEEP
  
  6144:5BFtse2ltLVIdjj0An0T2FtOrxc6WNVTlSaGEYI4zPsCex:5BUXVUXUT2FwFELGBxVex
Score

1^/10
behavioral3 behavioral4 behavioral5
- Target
  
  bdxadsdk.jar
- Size
  
  195KB
- MD5
  
  c3b999326b7187bdd85fd971f93376d6
- SHA1
  
  978fa76710506b2aa2dc1502e2697355cc64e34e
- SHA256
  
  555e565b45d2b030652d914830ad427d15182797886316024a2f04df6ac81d5e
- SHA512
  
  240981a457a3df5ce7f51ae1e0b323efc37b349a261e21d52ef8e9256d758f5c7dd4bcd6411ca2dc247de1beec2ad1a0f7f49d2370971c8c65f95b0d6c14b31e
- SSDEEP
  
  3072:bFg/OTNG1obNXB45vAEsreszccGiXzU+wtBJPkyzy4H/mqku/DjEWKVQNCDu:u/Ow+x69ftc9XzStBJ8y5mqkYDjv3Gu
Score

1^/10
behavioral6 behavioral7 behavioral8
- Target
  
  gdtadv2.jar
- Size
  
  420KB
- MD5
  
  f0ee7f7dd1ef4e5cd436ed6e1c609e5a
- SHA1
  
  7d112abb7896294b075721b0200f0812ed65a418
- SHA256
  
  0906bca7332f10d1bdc98b04eb5ad9de2af5da0590b5615aa5f66852b78d9369
- SHA512
  
  5912538f74fcbe24bba5e3eef2804fd160ccd002bf144e30dd910c9d52d6a3e2dc172a3baa1f6d64ed93346a9b1d4760ae17ec6d1c7c8a4de8cb9264b82bf2be
- SSDEEP
  
  6144:mQCx8Rp2KiQB/B4Qfdw3Vr/+rwWTLAUq3PwB32k59CruFIBSSAOC8hkIwx:ok/z/BJfdUW8W8ho4k59tSaOCckIS
Score

1^/10
behavioral9
- Target
  
  tcore.jar
- Size
  
  158KB
- MD5
  
  089de5b2d4ed5a8329bf9b24e64b1110
- SHA1
  
  32ac41c748f9d6862cc211e6fdea4be07dd02482
- SHA256
  
  4d367a4d3ec67192bb713f956f2150dace29bae4403bb017818b63050bf2e16e
- SHA512
  
  add1df18c6b6a03d1ee01ab9d2d227bbcf9242604eab52cfa612b1e2dfced544929149c1d5b6c31604ee8b8daa5deebbdae601d83d1af0532bc8921d08d69cd3
- SSDEEP
  
  3072:eIslgKNcI8lK2f2pz0FXzAkmMTzwo/7JGs5oqhRd8NqxAZXjxc9cWlV6u4gJ6vq+:qmhLBFXzJhRRetNceNcSoVBfJ6vp7zYo
Score

1^/10
behavioral10 behavioral11 behavioral12

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

Checks if the Android device is rooted.

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Requests cell location

Requests cell location

Checks CPU information

Checks memory information

Loads dropped Dex/Jar

Makes use of the framework's foreground persistence service

Obtains sensitive information copied to the device clipboard

Queries information about running processes on the device

Queries information about the current Wi-Fi connection

Queries information about the current nearby Wi-Fi networks

Queries the mobile country code (MCC)

Registers a broadcast receiver at runtime (usually for listening for system events)

Checks if the internet connection is available

Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12