General

  • Target

    67b3d01b5e7c2a3c59b704722b7cf59a_JaffaCakes118

  • Size

    3.9MB

  • Sample

    240522-sp1pwsff56

  • MD5

    67b3d01b5e7c2a3c59b704722b7cf59a

  • SHA1

    fc28f8e5e4ad060ae3536ec2f47b8a03a73f21b5

  • SHA256

    d4cfda3c6e48d9395ab6b28a1235b878f1f294a9d7f5ec8a0ee6ae80096919de

  • SHA512

    4fb55e0fc13db8c82dad9ed8fa0379415fc0f72b9a156b056e4a28918823af62353120fe0bfea55f65c95ed290bf56dcc56149f2e9f28dbbab5f5d67397af8e8

  • SSDEEP

    98304:Nz4y3gNNt+/NeJkPj+XhyTNshojq6w0YcpNt5gK4V:NngNPOeJkPSXwNsyjXwZm5O

Malware Config

Targets

    • Target

      67b3d01b5e7c2a3c59b704722b7cf59a_JaffaCakes118

    • Size

      3.9MB

    • MD5

      67b3d01b5e7c2a3c59b704722b7cf59a

    • SHA1

      fc28f8e5e4ad060ae3536ec2f47b8a03a73f21b5

    • SHA256

      d4cfda3c6e48d9395ab6b28a1235b878f1f294a9d7f5ec8a0ee6ae80096919de

    • SHA512

      4fb55e0fc13db8c82dad9ed8fa0379415fc0f72b9a156b056e4a28918823af62353120fe0bfea55f65c95ed290bf56dcc56149f2e9f28dbbab5f5d67397af8e8

    • SSDEEP

      98304:Nz4y3gNNt+/NeJkPj+XhyTNshojq6w0YcpNt5gK4V:NngNPOeJkPSXwNsyjXwZm5O

    • Checks if the Android device is rooted.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks if the internet connection is available

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

    • Schedules tasks to execute at a specified time

      Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

MITRE ATT&CK Matrix

Tasks