General

  • Target

    6a3d755cf49033d034017b5d43e4e925_JaffaCakes118

  • Size

    1.5MB

  • Sample

    240523-jmn4mshg94

  • MD5

    6a3d755cf49033d034017b5d43e4e925

  • SHA1

    47ff89d43f0aa35c21162e0b29746878f684dcd9

  • SHA256

    575a23e1c9d325bf5e0ab9ef52b9cd604ee6c6c0151e631e5cff30933df4b020

  • SHA512

    d7095fe497df7dabdc79aacd5bed28b602e552f93c79b6ec4e82e2d1b0ed5198557f6cf381073ba2992f156e3f3405f061bac047d7dc24446a281e2a5211c7b1

  • SSDEEP

    24576:aYsHuqWd1H31B/kCVfpEHzoseOnX5MFDOjtLy87Gyogv+DYFytI8J04cl4j1lReK:QHT83X/+HzteXOx286yogDFy5Bcp07F

Malware Config

Targets

    • Target

      6a3d755cf49033d034017b5d43e4e925_JaffaCakes118

    • Size

      1.5MB

    • MD5

      6a3d755cf49033d034017b5d43e4e925

    • SHA1

      47ff89d43f0aa35c21162e0b29746878f684dcd9

    • SHA256

      575a23e1c9d325bf5e0ab9ef52b9cd604ee6c6c0151e631e5cff30933df4b020

    • SHA512

      d7095fe497df7dabdc79aacd5bed28b602e552f93c79b6ec4e82e2d1b0ed5198557f6cf381073ba2992f156e3f3405f061bac047d7dc24446a281e2a5211c7b1

    • SSDEEP

      24576:aYsHuqWd1H31B/kCVfpEHzoseOnX5MFDOjtLy87Gyogv+DYFytI8J04cl4j1lReK:QHT83X/+HzteXOx286yogDFy5Bcp07F

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the phone number (MSISDN for GSM devices)

    • Checks if the internet connection is available

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks