e6b9441bf831daa31a34ad7afd9a6f6777381c2b367892000d9f42c5d01e3292

Sharing

Copy URL

Twitter E-mail

General

Target

67f465f3390b181f1dd8d2b5c1eeb521_JaffaCakes118
Size

3.8MB
Sample

240522-vgtmqahg45
MD5

67f465f3390b181f1dd8d2b5c1eeb521
SHA1

38eee93cb11a620f990819f9df5422e85c641061
SHA256

e6b9441bf831daa31a34ad7afd9a6f6777381c2b367892000d9f42c5d01e3292
SHA512

6497265bf748bd67b1369cf3822b803a9f99243792ec6930473aa49a1c371ef22bfe35d8c3efd252d602646240a1341836cc8a7ae86d4b7c475a94695c55c744
SSDEEP

98304:bGq6flX47Rh+qC4pWQlI4C380WfHkA4CulJGO+YeUAroPH9rs1:bGq6flI7Rh+qtpVlI4Tv/kHhWoPHk

Score

8^/10

Malware Config

Targets

- Target
  
  67f465f3390b181f1dd8d2b5c1eeb521_JaffaCakes118
- Size
  
  3.8MB
- MD5
  
  67f465f3390b181f1dd8d2b5c1eeb521
- SHA1
  
  38eee93cb11a620f990819f9df5422e85c641061
- SHA256
  
  e6b9441bf831daa31a34ad7afd9a6f6777381c2b367892000d9f42c5d01e3292
- SHA512
  
  6497265bf748bd67b1369cf3822b803a9f99243792ec6930473aa49a1c371ef22bfe35d8c3efd252d602646240a1341836cc8a7ae86d4b7c475a94695c55c744
- SSDEEP
  
  98304:bGq6flX47Rh+qC4pWQlI4C380WfHkA4CulJGO+YeUAroPH9rs1:bGq6flI7Rh+qtpVlI4Tv/kHhWoPHk
Score

8^/10

banker discovery evasion impact persistence collection credential_access
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries the mobile country code (MCC)
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Checks if the internet connection is available
  discovery
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
- Reads information about phone network operator.
  discovery
behavioral1 behavioral2
- Target
  
  ixintui_plugin.jar
- Size
  
  54KB
- MD5
  
  0fd5745abb8efd27d19339cb8bf74c31
- SHA1
  
  0514c079304f4ca950dca9c5071fc8f149a644f2
- SHA256
  
  fee09a01b0393e0ee0d4e344b798d990be0783be31b6d8829a6aa9329928a848
- SHA512
  
  598e6cd7ab9c7147cd532d3c491e3a7158068b7024a8293c9c99cb32e5d1dce0800e3f42b8914380156a0901973c9ced495aee3d9c628f674bc0b23472d2bb96
- SSDEEP
  
  1536:6WI7jUw5M9MuVfRf62RRdkkEnPB4nyfWvT7j4jK:pg/MBfRf62DdkkEPBoyCT7aK
Score

1^/10
behavioral3 behavioral4 behavioral5
- Target
  
  stat_plugin.jar
- Size
  
  11KB
- MD5
  
  6407165af23fa8b3ecf0d65664d316e0
- SHA1
  
  60a74d827d9b9d80344e9f8669dc520f6d1f5a1b
- SHA256
  
  66b2e6169631facc018b1ceb4c7b15b406abe2fcc0d04207ad185ea53304b4fa
- SHA512
  
  c06fc91bc9d9637c634d2e08e90295885c76a765444d0e552d33630c5f591870bc0a8b823d6e26394de131f610a0f72829e42999a4bb38f2894356a410be564e
- SSDEEP
  
  192:lCAKA7gwd+B9DZax2VBxypKgdr1I7Wj7uGZ1IAonVZl0M9TzmCm8VUyvdqx6HT4Z:tCO2VBxypbB1AWjHzVAjBTS59yBZpD4
Score

1^/10
behavioral6 behavioral7 behavioral8