Overview

overview

8

Static

static

6

6a7537bb73...18.apk

android-9-x86

8

6a7537bb73...18.apk

android-13-x64

VqsPhone.apk

android-9-x86

1

VqsPhone.apk

android-10-x64

1

VqsPhone.apk

android-11-x64

1

__pasys_re...er.apk

android-9-x86

__pasys_re...er.apk

android-10-x64

__pasys_re...er.apk

android-11-x64

__pasys_re...er.apk

android-9-x86

__pasys_re...er.apk

android-10-x64

__pasys_re...er.apk

android-11-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6a7537bb73569dcfaae7bc63dce1595f_JaffaCakes118

  • Size

    27.0MB

  • Sample

    240523-k8antabf9t

  • MD5

    6a7537bb73569dcfaae7bc63dce1595f

  • SHA1

    6d61c683371e9a593ecd203c7091a2fe6e4243ca

  • SHA256

    8ab82ad1eb3c3dfe4d7d24f67193c4909844b52578c74e62d838d3b8c6c4f425

  • SHA512

    3e3a4a882f77eeb49f3d8922aa8cd7bf6f6aff59192d555bc438f46e76cf9ee4ebaeb8b8955d9d284ee630dcadd4f2bdbec621ace15c0184c7a68450a8495856

  • SSDEEP

    786432:jfqIkFjx3sUnB4jjvv2vv6/0P/fHswuHRSrDi7T:9gcAgT2a/0XkwaR6+H

Score
8/10
androidbankerdiscoveryevasion

Malware Config

Targets

    • Target

      6a7537bb73569dcfaae7bc63dce1595f_JaffaCakes118

    • Size

      27.0MB

    • MD5

      6a7537bb73569dcfaae7bc63dce1595f

    • SHA1

      6d61c683371e9a593ecd203c7091a2fe6e4243ca

    • SHA256

      8ab82ad1eb3c3dfe4d7d24f67193c4909844b52578c74e62d838d3b8c6c4f425

    • SHA512

      3e3a4a882f77eeb49f3d8922aa8cd7bf6f6aff59192d555bc438f46e76cf9ee4ebaeb8b8955d9d284ee630dcadd4f2bdbec621ace15c0184c7a68450a8495856

    • SSDEEP

      786432:jfqIkFjx3sUnB4jjvv2vv6/0P/fHswuHRSrDi7T:9gcAgT2a/0XkwaR6+H

    Score
    8/10
    bankerdiscoveryevasion

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      bankerdiscovery

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

      evasiondiscovery

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

      discovery
    behavioral1behavioral2

    • Target

      VqsPhone.apk

    • Size

      5.4MB

    • MD5

      ea94b584de7d2f8fca6f57338cab811d

    • SHA1

      3c38d437740a69b5dcd42999a00b7ae7e92c34c7

    • SHA256

      7e58da593a2ce5c0f9b62771347890943e319d3772b511de34eb821b5b69b2f5

    • SHA512

      38d28e6b80cb01ec2a43fa1c78a0c1f2469de165535a0c83a976dbd9321ddfa3647dd63bcdb3160b7ccdde977d25d4ce102ab1ba13e9f66d537fd1fbc3829ac6

    • SSDEEP

      98304:0tgnsuMZLtIhAUN5CNLaFwdcv4xj1oLoH8DM4Ryhtv2Q9+qQc6+j9Ur3G5C7Eo1v:LMLM8LaFk+4t1oLoH8DM4R+yKTpUr3Gw

    Score
    1/10
    behavioral3behavioral4behavioral5

    • Target

      __pasys_remote_banner.jar

    • Size

      108KB

    • MD5

      63ba17ca047dc71aa659c7ed8bb60de5

    • SHA1

      675bd0556bce8d43cd29a6d9b3d996d41f3e0b2b

    • SHA256

      2750f3af62f5b9d1d21f6a8215f529e472e7098ac16295b976a29115e8520a52

    • SHA512

      5b70f6bc391276d2034a97e371adad0a635caafdfc33d32791db1432d4cca3f0364e1af6b10b574df5c8f3345bd5539a4d70455aa521f10b239e68216f5ddc39

    • SSDEEP

      1536:JsIZFap4+HLANZ5+01fFI5iWBrANsLIHmd1C4i6L/AvuWD7i3z7Y6mrfrJvIC8O:JPZEpHrA3x1i53hxLOQ4I4mD3zk6mlI2

    Score
    1/10
    behavioral6behavioral7behavioral8

    • Target

      __pasys_remote_banner.jar

    • Size

      108KB

    • MD5

      63ba17ca047dc71aa659c7ed8bb60de5

    • SHA1

      675bd0556bce8d43cd29a6d9b3d996d41f3e0b2b

    • SHA256

      2750f3af62f5b9d1d21f6a8215f529e472e7098ac16295b976a29115e8520a52

    • SHA512

      5b70f6bc391276d2034a97e371adad0a635caafdfc33d32791db1432d4cca3f0364e1af6b10b574df5c8f3345bd5539a4d70455aa521f10b239e68216f5ddc39

    • SSDEEP

      1536:JsIZFap4+HLANZ5+01fFI5iWBrANsLIHmd1C4i6L/AvuWD7i3z7Y6mrfrJvIC8O:JPZEpHrA3x1i53hxLOQ4I4mD3zk6mlI2

    Score
    1/10
    behavioral10behavioral11behavioral9

MITRE ATT&CK Matrix

Tasks