General

  • Target

    687896184707a4d61e86818e5776018d_JaffaCakes118

  • Size

    3.4MB

  • Sample

    240522-yxxwvseh92

  • MD5

    687896184707a4d61e86818e5776018d

  • SHA1

    2d793e0b1d895ce3ca53f310c231f808314ef6a2

  • SHA256

    fe4a0bf6fb18ccca17d3e1b51707e5adefbf2e0d6ff4cc0cb2123a1e58752432

  • SHA512

    55f0fd6d68d86d084e51c7e328dd2474924a96555c6c8cc5201e8d215ce78fefcdd7b90964191be8fde9ed04a8e68a47812ca46a6763bbd7a9a272bed177b2cc

  • SSDEEP

    98304:WibSOz+wjLneiV2MFzLNASDKeO5MKLwdSzdUo:WCSWh8Fv7SKLMSL

Malware Config

Targets

    • Target

      687896184707a4d61e86818e5776018d_JaffaCakes118

    • Size

      3.4MB

    • MD5

      687896184707a4d61e86818e5776018d

    • SHA1

      2d793e0b1d895ce3ca53f310c231f808314ef6a2

    • SHA256

      fe4a0bf6fb18ccca17d3e1b51707e5adefbf2e0d6ff4cc0cb2123a1e58752432

    • SHA512

      55f0fd6d68d86d084e51c7e328dd2474924a96555c6c8cc5201e8d215ce78fefcdd7b90964191be8fde9ed04a8e68a47812ca46a6763bbd7a9a272bed177b2cc

    • SSDEEP

      98304:WibSOz+wjLneiV2MFzLNASDKeO5MKLwdSzdUo:WCSWh8Fv7SKLMSL

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    • Queries the phone number (MSISDN for GSM devices)

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks if the internet connection is available

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks