General

  • Target

    6815176d7a3ece3b2c62af5c970c0188_JaffaCakes118

  • Size

    7.8MB

  • Sample

    240522-wbpbgsag5y

  • MD5

    6815176d7a3ece3b2c62af5c970c0188

  • SHA1

    57486f150dd6fb3fcb4706a12b975e71081b19f4

  • SHA256

    6949fe5d05cca09e88ebc10abc5d6fd2bec9cfe40e08ca9495c027c66aeb03f6

  • SHA512

    289be5cf1329800d27b64bafa13af90cd83f891e3def443126308d724b9d7e6e4997972b477dd3abf79b78d2aa2cb8178e2177ee78c1745acb4c4c53f75d51b3

  • SSDEEP

    196608:dj3sDa1CHYjZnBdbOkSzh4qvlPLUE3yumlB479R:dj3kc/BAJmUFUE3MBW9R

Malware Config

Targets

    • Target

      6815176d7a3ece3b2c62af5c970c0188_JaffaCakes118

    • Size

      7.8MB

    • MD5

      6815176d7a3ece3b2c62af5c970c0188

    • SHA1

      57486f150dd6fb3fcb4706a12b975e71081b19f4

    • SHA256

      6949fe5d05cca09e88ebc10abc5d6fd2bec9cfe40e08ca9495c027c66aeb03f6

    • SHA512

      289be5cf1329800d27b64bafa13af90cd83f891e3def443126308d724b9d7e6e4997972b477dd3abf79b78d2aa2cb8178e2177ee78c1745acb4c4c53f75d51b3

    • SSDEEP

      196608:dj3sDa1CHYjZnBdbOkSzh4qvlPLUE3yumlB479R:dj3kc/BAJmUFUE3MBW9R

    • Checks if the Android device is rooted.

    • Checks Android system properties for emulator presence.

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Checks Qemu related system properties.

      Checks for Android system properties related to Qemu for Emulator detection.

    • Checks known Qemu files.

      Checks for known Qemu files that exist on Android virtual device images.

    • Checks known Qemu pipes.

      Checks for known pipes used by the Android emulator to communicate with the host.

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks if the internet connection is available

MITRE ATT&CK Matrix

Tasks