Overview

overview

8

Static

static

6

6a4d929d06...18.apk

android-9-x86

8

yayavoice_...ts.apk

android-9-x86

1

yayavoice_...ts.apk

android-10-x64

1

yayavoice_...ts.apk

android-11-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6a4d929d062188a4cf544d3b94da9bca_JaffaCakes118

  • Size

    14.9MB

  • Sample

    240523-j35fkaad77

  • MD5

    6a4d929d062188a4cf544d3b94da9bca

  • SHA1

    aea054d5f23140ec5e861b9c585f9d35d48123ae

  • SHA256

    6d3ddd9272e8a2c471fa811df88590a4a5dabd526fa0a969a9001f8cdadf1b50

  • SHA512

    42a26debc633d90680d7247a9dd85e2f1d73cd8481b072b1b390792c1c9f87d9db1dcb6840f0223e95f9c336f9be401c46c8167fd72f7c14ff7f2779bb1f4e3c

  • SSDEEP

    393216:mFk+JjKwmMn6ymlb7pqd9djgYehgzyUNw8wzaZD8mQIo:2k+J+wmM6ymlb9ijveqOFzax8mRo

Score
8/10
androidbankerdiscoveryevasionimpactpersistence

Malware Config

Targets

    • Target

      6a4d929d062188a4cf544d3b94da9bca_JaffaCakes118

    • Size

      14.9MB

    • MD5

      6a4d929d062188a4cf544d3b94da9bca

    • SHA1

      aea054d5f23140ec5e861b9c585f9d35d48123ae

    • SHA256

      6d3ddd9272e8a2c471fa811df88590a4a5dabd526fa0a969a9001f8cdadf1b50

    • SHA512

      42a26debc633d90680d7247a9dd85e2f1d73cd8481b072b1b390792c1c9f87d9db1dcb6840f0223e95f9c336f9be401c46c8167fd72f7c14ff7f2779bb1f4e3c

    • SSDEEP

      393216:mFk+JjKwmMn6ymlb7pqd9djgYehgzyUNw8wzaZD8mQIo:2k+J+wmM6ymlb9ijveqOFzax8mRo

    Score
    8/10
    bankerdiscoveryevasionimpactpersistence

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      bankerdiscovery

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

      evasiondiscovery

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

      discovery

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

      discovery

    • Registers a broadcast receiver at runtime (usually for listening for system events)

      persistence

    • Checks if the internet connection is available

      discovery
    behavioral1

    • Target

      yayavoice_for_assets.jar

    • Size

      244KB

    • MD5

      9046d08dffee86ba17eebc98320a4f65

    • SHA1

      0e3e309fb71111667098581461b44ba25e86fb4c

    • SHA256

      b727e3c6ba0d1b1ff9042ab2071ee33eaa2d54bccabcaefaab3760cb8a18f8ed

    • SHA512

      b41ea2cd3ade2068fa13d08734c2fea2f2d7cd9cbfc209a996e119dd9f70420ed01543af8f719de14a15cdcc1f041858196b6d63982e110e45e7d28ad903751e

    • SSDEEP

      6144:V7OA5kbwutteUc0EZ9K65TlRx8W3TLxoWSW:hyfT1c0e9JT8ITLxYW

    Score
    1/10
    behavioral2behavioral3behavioral4

MITRE ATT&CK Matrix

Tasks