9bad97ec8d9076932578b74a622b7d113b681ccbf7bc04279162766797e9e2fb

General

Target

681453b6a956bc0082ebf4f36c2bd36a_JaffaCakes118
Size

24.8MB
Sample

240522-wa1ccsag74
MD5

681453b6a956bc0082ebf4f36c2bd36a
SHA1

60e4239b7cfe549f1fc6e36a244fbc0be96597da
SHA256

9bad97ec8d9076932578b74a622b7d113b681ccbf7bc04279162766797e9e2fb
SHA512

6d926f8f5443ffd55002cd3dba86943a00dd9401c726db19b3ff7430d75ba19ec198aeadbf1aea7087368ce28b63b9b36491c469f62aef50ceba0c0690b06545
SSDEEP

786432:9utoc5pa1DL5tizgAMuExYex3jetEyowDF:9dcsDGPU7xyfr5

Score

8^/10

Malware Config

Targets

- Target
  
  681453b6a956bc0082ebf4f36c2bd36a_JaffaCakes118
- Size
  
  24.8MB
- MD5
  
  681453b6a956bc0082ebf4f36c2bd36a
- SHA1
  
  60e4239b7cfe549f1fc6e36a244fbc0be96597da
- SHA256
  
  9bad97ec8d9076932578b74a622b7d113b681ccbf7bc04279162766797e9e2fb
- SHA512
  
  6d926f8f5443ffd55002cd3dba86943a00dd9401c726db19b3ff7430d75ba19ec198aeadbf1aea7087368ce28b63b9b36491c469f62aef50ceba0c0690b06545
- SSDEEP
  
  786432:9utoc5pa1DL5tizgAMuExYex3jetEyowDF:9dcsDGPU7xyfr5
Score

8^/10

banker collection discovery evasion impact persistence
- Checks if the Android device is rooted.
  evasion
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Checks Android system properties for emulator presence.
  evasion
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Queries account information for other applications stored on the device
  Application may abuse the framework's APIs to collect account information stored on the device.
  collection
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Checks if the internet connection is available
  discovery
- Reads information about phone network operator.
  discovery
- Checks the presence of a debugger
  evasion
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

Checks if the Android device is rooted.

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Checks Android system properties for emulator presence.

Checks memory information

Queries account information for other applications stored on the device

Queries information about running processes on the device

Registers a broadcast receiver at runtime (usually for listening for system events)

Checks if the internet connection is available

Reads information about phone network operator.

Checks the presence of a debugger

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2