General

  • Target

    681c366ff94e2a930fa7f021ded75e85_JaffaCakes118

  • Size

    16.6MB

  • Sample

    240522-whpktsba5x

  • MD5

    681c366ff94e2a930fa7f021ded75e85

  • SHA1

    7f05053d8c70e3140abe4a5131fc43d3e94e6a5a

  • SHA256

    f024f97046d58efff0c01ce897f84c175518b5674708691f9f3a8d3e749a8e37

  • SHA512

    f62603b3e802029cb4b250e3b6189568cdc82022163284e01f5fc78ccd14cfa8c2e88679d6b931b99c2fb39841dc33d9ef61c0f15ef27266419ad2cbdfb3783c

  • SSDEEP

    196608:o1YsJlaCGns2Bx+FgjwXiO73G+YQ5sgE2VL8ffFuap9L4jEwPxP80H+WpRFdV:o1pJAOkxNwXio3jNVL8VuK9Lwjeqzr

Malware Config

Targets

    • Target

      681c366ff94e2a930fa7f021ded75e85_JaffaCakes118

    • Size

      16.6MB

    • MD5

      681c366ff94e2a930fa7f021ded75e85

    • SHA1

      7f05053d8c70e3140abe4a5131fc43d3e94e6a5a

    • SHA256

      f024f97046d58efff0c01ce897f84c175518b5674708691f9f3a8d3e749a8e37

    • SHA512

      f62603b3e802029cb4b250e3b6189568cdc82022163284e01f5fc78ccd14cfa8c2e88679d6b931b99c2fb39841dc33d9ef61c0f15ef27266419ad2cbdfb3783c

    • SSDEEP

      196608:o1YsJlaCGns2Bx+FgjwXiO73G+YQ5sgE2VL8ffFuap9L4jEwPxP80H+WpRFdV:o1pJAOkxNwXio3jNVL8VuK9Lwjeqzr

    • Checks if the Android device is rooted.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks if the internet connection is available

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks