Overview

overview

7

Static

static

6

69b6157ff9...18.apk

android-9-x86

7

69b6157ff9...18.apk

android-10-x64

1

ZqhySafePay.apk

android-9-x86

1

ZqhySafePay.apk

android-10-x64

1

ZqhySafePay.apk

android-11-x64

1

res.apk

android-9-x86

res.apk

android-10-x64

res.apk

android-11-x64

tcore.apk

android-9-x86

tcore.apk

android-10-x64

tcore.apk

android-11-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    69b6157ff95e186f6a1dcb25a920b88a_JaffaCakes118

  • Size

    20.9MB

  • Sample

    240523-eyz8tsdg34

  • MD5

    69b6157ff95e186f6a1dcb25a920b88a

  • SHA1

    db21435083afdbf0b3c568d89453a472680f7de7

  • SHA256

    c32ccb3a8a9a359586ae881ec188a7b49f2f2b808ee6768b2287c70ff952fecb

  • SHA512

    798d919fd7b9368662dc57fa0f761ef6a491c262264f23b31aa6a2b4fdd3eb1d79d09cdd7db6ff08362cf134b03ac848c90ec4c1c82d75c39cd132808fbaa120

  • SSDEEP

    393216:TDs+bnbzvavU6Zp067vDVE2lo3y3Wk0qTo8TZhnEl2dMiMknB:TDs+fzvavbnDm2Ek0qThq2dMzK

Score
7/10
androiddiscoveryevasionpersistence

Malware Config

Targets

    • Target

      69b6157ff95e186f6a1dcb25a920b88a_JaffaCakes118

    • Size

      20.9MB

    • MD5

      69b6157ff95e186f6a1dcb25a920b88a

    • SHA1

      db21435083afdbf0b3c568d89453a472680f7de7

    • SHA256

      c32ccb3a8a9a359586ae881ec188a7b49f2f2b808ee6768b2287c70ff952fecb

    • SHA512

      798d919fd7b9368662dc57fa0f761ef6a491c262264f23b31aa6a2b4fdd3eb1d79d09cdd7db6ff08362cf134b03ac848c90ec4c1c82d75c39cd132808fbaa120

    • SSDEEP

      393216:TDs+bnbzvavU6Zp067vDVE2lo3y3Wk0qTo8TZhnEl2dMiMknB:TDs+fzvavbnDm2Ek0qThq2dMzK

    Score
    7/10
    discoveryevasionpersistence

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

      evasiondiscovery

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

      evasiondiscovery

    • Queries the mobile country code (MCC)

      discovery

    • Registers a broadcast receiver at runtime (usually for listening for system events)

      persistence

    • Checks if the internet connection is available

      discovery

    • Queries the unique device ID (IMEI, MEID, IMSI)

      discovery
    behavioral1behavioral2

    • Target

      ZqhySafePay.apk

    • Size

      1.0MB

    • MD5

      fd719d8398cdefa19ea1e6771ac920d5

    • SHA1

      24191e6dc40c95f1ef62c59cb6d64caafa71ef26

    • SHA256

      76af0c879267d03328fee2064dcb2fafdbb007f9fabfbf55f543bfd38dc83f00

    • SHA512

      9b638eaff5be9ef1058971f43fdd0dfe7464b34ee33d89139b39dc6b71bcd73184fdda6276dc16433d7f2effb6ff5204760c2d0f427860c0e5f6e5e5e39b209f

    • SSDEEP

      24576:wZ1BEoimgZusEviyw+Usx3jnKTl0ypAF7ltIfhnPvsiNl3:wnaFZ06yhn3Cr8tWhnPvsiNB

    Score
    1/10
    behavioral3behavioral4behavioral5

    • Target

      res.bin

    • Size

      205KB

    • MD5

      dafb7d4b90ea8d376128c625183dd9ad

    • SHA1

      883c9b0586e740e9fb976d27a437e84fc26e92fd

    • SHA256

      07be7e035e50b372d700b7cc148515a26b0775b2b485e50895988753fe24b12b

    • SHA512

      56deefb30f358f2d404c93725f331374f0878b8121d95412ab1b1299364b2eea2b7fe179e21bbe96f4076300556a09f55825118ff67b401504c2f3b82af6b13b

    • SSDEEP

      3072:jFsFh83XDWxVFkPRLccq5sOwglfnhdQkWVsXQp6D9PhTbnEaxEiQWu6vSP:jFrzWlkKcqiglfnrXDRFnEaxxaP

    Score
    1/10
    behavioral6behavioral7behavioral8

    • Target

      tcore.jar

    • Size

      142KB

    • MD5

      0178df0f4cc6d767e964e590cdba7014

    • SHA1

      b17f67d0e42b9290937d784343241dac6a88ffe9

    • SHA256

      03970a2284ba10d93188127f43edcd838d7c9824c3511dae10e3693bb6057b3f

    • SHA512

      6fe8e2e9a72612d6917677f6562406943b0a7a832d40438dfeaaf86ca303ae19e92d65a55e5b20902a79b343c2ed8e2cd47322ba3a15955cb21c73274876c76f

    • SSDEEP

      3072:DD1Q/QgpcRiLw5RU6kUFTkTSGbHmsb756:D0QgpQV3U5pSsG26

    Score
    1/10
    behavioral10behavioral11behavioral9

MITRE ATT&CK Matrix

Tasks