dbe63111d70e15fae9048f49f7a6fe3a35bb25bafea71874d857e65e17f3ab28

Sharing

Copy URL

Twitter E-mail

General

Target

69f62c4acc85312308cdba5e59b8ebec_JaffaCakes118
Size

19.7MB
Sample

240523-gn5fxafg59
MD5

69f62c4acc85312308cdba5e59b8ebec
SHA1

7bd8d78f3ca1093fc8626d69414fa5cb1b97d747
SHA256

dbe63111d70e15fae9048f49f7a6fe3a35bb25bafea71874d857e65e17f3ab28
SHA512

67875fb7758903e9b42c1460275bd21dd8a001a66cfd8bb74eb07684388090622c94a2ead27705c6a120b881f5f7f07e030e654eeab89bb7ee459ea28b78791a
SSDEEP

393216:9N8dXcV6rTgVJr6JH8JRnppDGo0UjoDtw+8zKai1oFgUxMgmI6cnSnK:9N8dMlVJeJHwppDh0GUw+8maDIhI3nSK

Score

7^/10

Malware Config

Targets

- Target
  
  69f62c4acc85312308cdba5e59b8ebec_JaffaCakes118
- Size
  
  19.7MB
- MD5
  
  69f62c4acc85312308cdba5e59b8ebec
- SHA1
  
  7bd8d78f3ca1093fc8626d69414fa5cb1b97d747
- SHA256
  
  dbe63111d70e15fae9048f49f7a6fe3a35bb25bafea71874d857e65e17f3ab28
- SHA512
  
  67875fb7758903e9b42c1460275bd21dd8a001a66cfd8bb74eb07684388090622c94a2ead27705c6a120b881f5f7f07e030e654eeab89bb7ee459ea28b78791a
- SSDEEP
  
  393216:9N8dXcV6rTgVJr6JH8JRnppDGo0UjoDtw+8zKai1oFgUxMgmI6cnSnK:9N8dMlVJeJHwppDh0GUw+8maDIhI3nSK
Score

7^/10

discovery evasion impact persistence
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Checks if the internet connection is available
  discovery
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
behavioral1 behavioral2
- Target
  
  bdxadsdk.jar
- Size
  
  184KB
- MD5
  
  42743cd25c9e512e5e10c910987acaaa
- SHA1
  
  4636f14dd07e4c7a0f331de24f5773fe53f753c8
- SHA256
  
  7fd095f1f1ace3d5d991983c6e546e8e140b7d5e9e05f1fbd09428a200fff75d
- SHA512
  
  f47093757326da5f67e944035ebdefe04f3fa180639e08aa34768d0024aded7e9c99bb5b60b9b8447b972baad75943a67f449cba9b73bc6734f0edbb204c9132
- SSDEEP
  
  3072:/xzT+5M72vv1ECi9Rt5zHpPFOqHVPZoLhnLPsn+Dtc8ymU7PeYdJ14rkFn14zepH:/RS5M7Kvzi9z5zJD1PZo5g+DtcYUbPdN
Score

1^/10
behavioral3 behavioral4 behavioral5
- Target
  
  gdtadv2.jar
- Size
  
  230KB
- MD5
  
  33aeb27eefc5ae7838f01186e27d8816
- SHA1
  
  2a7ef64266577916f05cc841c9f977ca8a34568f
- SHA256
  
  c6a8f2838c910a50b56bddad227ebed00b8b32a6869a432c83964b1150ad2c59
- SHA512
  
  ebd8ccc5750aa1c2a28e849149d0ef3d1c997479008a803a931ea10c82bd99d90797a99329690cbea6cbc18d45bbe481a5576abfe3ca8afc96dbb3974a0e00c5
- SSDEEP
  
  6144:B8Obhi9RAdTKqZVGee8QXMLzKb/n4BQk+m:BbhiTAEQeVsWrn4BUm
Score

1^/10
behavioral6 behavioral7 behavioral8
- Target
  
  geihuiTBOrder.apk
- Size
  
  4.1MB
- MD5
  
  78cb8658c22673f6a57d070436a20ddd
- SHA1
  
  27052dc104d6dbc507a3079b59ceaac02be11dc0
- SHA256
  
  8bcc7be26c5c0e35e210168121c86cbc1fb4cbce7f604161c428a9cf4baebcfe
- SHA512
  
  709967f82f10fb52df5c5bd1ef63b9d4815c59e3a1183518b9ff65d6804530eae33fb91d50f4e9f1f3a9be4b2aad4972d8cf52fdaac7dd4b8991f0e0cab3391a
- SSDEEP
  
  98304:dxx9aeqSohaCLVXsxpx3dpqMYCGMXAgF3tb6I7dXJBaGFHbcPNd88Y6S:Tx9aeqSonZ4xNp0CXDZJ6IhbFGNdNY5
Score

7^/10

collection credential_access discovery evasion impact persistence
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries the mobile country code (MCC)
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Checks if the internet connection is available
  discovery
behavioral10 behavioral9

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

Checks CPU information

Checks memory information

Loads dropped Dex/Jar

Queries information about running processes on the device

Registers a broadcast receiver at runtime (usually for listening for system events)

Checks if the internet connection is available

Queries the unique device ID (IMEI, MEID, IMSI)

Checks memory information

Obtains sensitive information copied to the device clipboard

Queries information about running processes on the device

Queries the mobile country code (MCC)

Registers a broadcast receiver at runtime (usually for listening for system events)

Checks if the internet connection is available

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10