5eab1cd67c8c9972310dff288b66c1b684226269a9fdb69ae6f0529194a8c3ab

General

Target

6c9b646b54a5b612055189227a759e9d_JaffaCakes118
Size

1.7MB
Sample

240523-3a8r3ada7x
MD5

6c9b646b54a5b612055189227a759e9d
SHA1

e0ef3920bd798026efdec8b55a6d2dd846702674
SHA256

5eab1cd67c8c9972310dff288b66c1b684226269a9fdb69ae6f0529194a8c3ab
SHA512

0c53afab53cacaa7b1050f5951e58cf1442716ac10535a3f2b91e11f6979855c79ae45710a82175e94bdb2c50b40b2d388e5c1b23fa9bf905b12d4d3087f963a
SSDEEP

24576:8ECdwvTkQlO4u1ZpDwKS65cJ6FRUD3Ju0x5sIiiXAAPOPnQ+lpfbpI0sze5aJBrd:8WTRlgU67PU9uUzcHi08/JBrhSUrt

Score

8^/10

Malware Config

Targets

- Target
  
  6c9b646b54a5b612055189227a759e9d_JaffaCakes118
- Size
  
  1.7MB
- MD5
  
  6c9b646b54a5b612055189227a759e9d
- SHA1
  
  e0ef3920bd798026efdec8b55a6d2dd846702674
- SHA256
  
  5eab1cd67c8c9972310dff288b66c1b684226269a9fdb69ae6f0529194a8c3ab
- SHA512
  
  0c53afab53cacaa7b1050f5951e58cf1442716ac10535a3f2b91e11f6979855c79ae45710a82175e94bdb2c50b40b2d388e5c1b23fa9bf905b12d4d3087f963a
- SSDEEP
  
  24576:8ECdwvTkQlO4u1ZpDwKS65cJ6FRUD3Ju0x5sIiiXAAPOPnQ+lpfbpI0sze5aJBrd:8WTRlgU67PU9uUzcHi08/JBrhSUrt
Score

8^/10

banker discovery evasion persistence
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Checks Android system properties for emulator presence.
  evasion
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries the mobile country code (MCC)
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Checks if the internet connection is available
  discovery
behavioral1
- Target
  
  res.bin
- Size
  
  146KB
- MD5
  
  519b8818baa546b8451ced4ef2097071
- SHA1
  
  2b7484bf05b8b6b3f87da71507ca7784bf32f9ec
- SHA256
  
  6049b177ed91c397f8c8866d3f668c9726b5dc47f2a508b305e079c1c6e5f724
- SHA512
  
  c2a0b39265b61e3d51867555d90d6b5bad82c17a4f0fad8d26eaf8f1af15b6ae088085a1e0d4df24f5ec344ae194ecb9347609a10de72216c910ee2704729e21
- SSDEEP
  
  3072:JxSpGw1O4dNzE0S13UOQ2gm3NoS0GlplIef5OonqTpsgMR+3eKJRE:S51Ldxd+3xNF0GGef5OupBkPRE
Score

1^/10
behavioral2 behavioral3 behavioral4

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Checks Android system properties for emulator presence.

Checks CPU information

Checks memory information

Loads dropped Dex/Jar

Queries information about the current Wi-Fi connection

Queries the mobile country code (MCC)

Registers a broadcast receiver at runtime (usually for listening for system events)

Checks if the internet connection is available

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4