General

  • Target

    6913dd93c51906fa437b45a279d97a6a_JaffaCakes118

  • Size

    17.9MB

  • Sample

    240523-aalcjsea3z

  • MD5

    6913dd93c51906fa437b45a279d97a6a

  • SHA1

    9b8ea701727d28e7bebdb005ef3b6fea0f96ad87

  • SHA256

    4a25ad7a92add771ce4d69e797b3ec28be3d251f5accaff68023e06f809f1d75

  • SHA512

    8b568eb47757c37a88890ae1733f7b6d13ceb0636694f101b84982a5667535154df44c1452c9a6199b410d36119a0d9114777c6e4be78bf47774ad84cb164fd2

  • SSDEEP

    393216:n04p8Owz60so0X0C+ScCR/cK6w9d0e8GOY32sUnojGptaEl:DK6f/Zxb6w30e8GOJ7nojGpYM

Malware Config

Targets

    • Target

      6913dd93c51906fa437b45a279d97a6a_JaffaCakes118

    • Size

      17.9MB

    • MD5

      6913dd93c51906fa437b45a279d97a6a

    • SHA1

      9b8ea701727d28e7bebdb005ef3b6fea0f96ad87

    • SHA256

      4a25ad7a92add771ce4d69e797b3ec28be3d251f5accaff68023e06f809f1d75

    • SHA512

      8b568eb47757c37a88890ae1733f7b6d13ceb0636694f101b84982a5667535154df44c1452c9a6199b410d36119a0d9114777c6e4be78bf47774ad84cb164fd2

    • SSDEEP

      393216:n04p8Owz60so0X0C+ScCR/cK6w9d0e8GOY32sUnojGptaEl:DK6f/Zxb6w30e8GOJ7nojGpYM

    • Checks if the Android device is rooted.

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks if the internet connection is available

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

    • Listens for changes in the sensor environment (might be used to detect emulation)

MITRE ATT&CK Mobile v15

Tasks