Overview

overview

7

Static

static

6

67ee9bfbfe...18.apk

android-9-x86

7

67ee9bfbfe...18.apk

android-10-x64

7

67ee9bfbfe...18.apk

android-11-x64

7

UPPayPluginEx.apk

android-9-x86

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    67ee9bfbfe7df5b650a8a69afe59cd63_JaffaCakes118

  • Size

    4.1MB

  • Sample

    240522-va6cyahf2z

  • MD5

    67ee9bfbfe7df5b650a8a69afe59cd63

  • SHA1

    629cca00ecbfd41a77ddf36c72e2b185191288de

  • SHA256

    5ffd8374ace87d26be6a7a2028b5988934dd7aab3c6f16b069559dcff7d51ce6

  • SHA512

    b84f7531fe284abcd5512098b9cc7e06473d6521eb8708a797b61a27c34d4bbaf9b5340820d25cbb946092165cc1bd7a618c670287118b9f98b5cc368473c171

  • SSDEEP

    98304:F9R9ml0wEdS3ZPBXYsupKdw+taxMx9ZUrHxyjywJBg:l9ig4ZJEp72axMxgrRWM

Score
7/10
androidcollectioncredential_accessdiscoveryevasionimpactpersistence

Malware Config

Targets

    • Target

      67ee9bfbfe7df5b650a8a69afe59cd63_JaffaCakes118

    • Size

      4.1MB

    • MD5

      67ee9bfbfe7df5b650a8a69afe59cd63

    • SHA1

      629cca00ecbfd41a77ddf36c72e2b185191288de

    • SHA256

      5ffd8374ace87d26be6a7a2028b5988934dd7aab3c6f16b069559dcff7d51ce6

    • SHA512

      b84f7531fe284abcd5512098b9cc7e06473d6521eb8708a797b61a27c34d4bbaf9b5340820d25cbb946092165cc1bd7a618c670287118b9f98b5cc368473c171

    • SSDEEP

      98304:F9R9ml0wEdS3ZPBXYsupKdw+taxMx9ZUrHxyjywJBg:l9ig4ZJEp72axMxgrRWM

    Score
    7/10
    discoveryevasionpersistencecollectioncredential_accessimpact

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

      evasiondiscovery

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

      evasion

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

      collectioncredential_accessimpact

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

      discovery

    • Queries the mobile country code (MCC)

      discovery

    • Registers a broadcast receiver at runtime (usually for listening for system events)

      persistence

    • Queries the unique device ID (IMEI, MEID, IMSI)

      discovery
    behavioral1behavioral2behavioral3

    • Target

      UPPayPluginEx.apk

    • Size

      742KB

    • MD5

      b96d1094490791429fc0e62ff5db21a6

    • SHA1

      48ced320d656172612eee2d01e3f34e74cb61639

    • SHA256

      b6200ef234859b40f5d4a3e72f3f3e6856e17a5bd1b1bb5d42570970cc2497b6

    • SHA512

      e7bf3be836b5e3f437304645fa506b0b1a395bd1867e74923321f28637e7a16cc1c8438499a800ce06c2c742ee5f5340daacdf376edfcc010528108319532463

    • SSDEEP

      12288:AdBQNmgx/FUk3ee4BunZ49KCS2PznpSsPF1rDb2LQ6iZMB7/an6kIUXThJRkV+hO:pNTx/FJexgnBCRrMsN1iErEklzRASM

    Score
    1/10
    behavioral4

MITRE ATT&CK Matrix

Tasks