Overview

overview

8

Static

static

6

6915b63461...18.apk

android-9-x86

8

gdtadv2.apk

android-9-x86

gdtadv2.apk

android-10-x64

gdtadv2.apk

android-11-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6915b634610afcd1603089d162cf2b82_JaffaCakes118

  • Size

    5.9MB

  • Sample

    240523-ac16saec39

  • MD5

    6915b634610afcd1603089d162cf2b82

  • SHA1

    06c52981402bda3f75894dfa32f4abaf604efb9a

  • SHA256

    7b9cc9f181fe00cda9e0b91b48333e00ad2e6644480891ba2ded55a9b1d3b055

  • SHA512

    02e0bd40e3fa251b7adbb10fcde9dc9484208639c543a886c2f55d57f572bb698a898f0894169c88519acd28f3d3c840e96cb711c8abba5244c235f2aa7c5ce6

  • SSDEEP

    98304:VvUMLXuT1v8gm7HHlCeL+dKe6+R1b0S944mo5sm1/Z8yHBdurG0YnfQOUqcwVAOs:FUh8gm7HHlt+1R1X94msm1XBsfwQDwVA

Score
8/10
androidbankerdiscoveryimpactpersistence

Malware Config

Targets

    • Target

      6915b634610afcd1603089d162cf2b82_JaffaCakes118

    • Size

      5.9MB

    • MD5

      6915b634610afcd1603089d162cf2b82

    • SHA1

      06c52981402bda3f75894dfa32f4abaf604efb9a

    • SHA256

      7b9cc9f181fe00cda9e0b91b48333e00ad2e6644480891ba2ded55a9b1d3b055

    • SHA512

      02e0bd40e3fa251b7adbb10fcde9dc9484208639c543a886c2f55d57f572bb698a898f0894169c88519acd28f3d3c840e96cb711c8abba5244c235f2aa7c5ce6

    • SSDEEP

      98304:VvUMLXuT1v8gm7HHlCeL+dKe6+R1b0S944mo5sm1/Z8yHBdurG0YnfQOUqcwVAOs:FUh8gm7HHlt+1R1X94msm1XBsfwQDwVA

    Score
    8/10
    bankerdiscoveryimpactpersistence

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      bankerdiscovery

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

      discovery

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

      discovery

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

      discovery

    • Registers a broadcast receiver at runtime (usually for listening for system events)

      persistence

    • Checks if the internet connection is available

      discovery

    • Reads information about phone network operator.

      discovery
    behavioral1

    • Target

      gdtadv2.jar

    • Size

      149KB

    • MD5

      5bbd4987057c6aa8f1992d72206c68a9

    • SHA1

      3a2b6dae68dce8239f680c2684c648238bc1bf36

    • SHA256

      2a7fea6e019debe6a0b0c8a5bff40a0451133d3f122d3bcb8f28aed615c50539

    • SHA512

      ec138779d809f32ffe54998314263546f630fef799bb3cbf61fd494706724a3f756e0b3a5e721765b121a053b56cbe3e39f8edd09c17cae8289d677f9c4b8f73

    • SSDEEP

      3072:s9ECghK7Pic1Oy3c/obh2acQZD8+jb1gUKno8+l7kSVi:sig7KijlbhncQ58CCUKolkSM

    Score
    1/10
    behavioral2behavioral3behavioral4

MITRE ATT&CK Matrix

Tasks