62168d31104f7e6f73e365cedce8d39cfd7faa196ec1715de1a1cf046035ef62

General

Target

6a657f43832956d6faf4c4ca136808a0_JaffaCakes118
Size

3.5MB
Sample

240523-kscs8sbc67
MD5

6a657f43832956d6faf4c4ca136808a0
SHA1

537f7a5c273ea07e6ae3d669948a6c8e8cb6f32b
SHA256

62168d31104f7e6f73e365cedce8d39cfd7faa196ec1715de1a1cf046035ef62
SHA512

0cc2ad69e11e1adc7c6c1adadaf8c3e8288d06bc375c8e1c3235938e2f6ac11d557483d5e197ca6fd207f006ca582d6daba82e7872a2e11bada89eb20d022e34
SSDEEP

98304:EnCrgeyu15BtPxE/bMZMoUWb8ekleZviYKj5dHJwJwLKroJIPASMIe:EM6/wZBTYekleZLQwKL0ocAS6

Score

8^/10

Malware Config

Targets

- Target
  
  6a657f43832956d6faf4c4ca136808a0_JaffaCakes118
- Size
  
  3.5MB
- MD5
  
  6a657f43832956d6faf4c4ca136808a0
- SHA1
  
  537f7a5c273ea07e6ae3d669948a6c8e8cb6f32b
- SHA256
  
  62168d31104f7e6f73e365cedce8d39cfd7faa196ec1715de1a1cf046035ef62
- SHA512
  
  0cc2ad69e11e1adc7c6c1adadaf8c3e8288d06bc375c8e1c3235938e2f6ac11d557483d5e197ca6fd207f006ca582d6daba82e7872a2e11bada89eb20d022e34
- SSDEEP
  
  98304:EnCrgeyu15BtPxE/bMZMoUWb8ekleZviYKj5dHJwJwLKroJIPASMIe:EM6/wZBTYekleZLQwKL0ocAS6
Score

8^/10

banker collection discovery evasion persistence
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Requests cell location
  Uses Android APIs to to get current cell location.
  collection discovery evasion
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries information about the current nearby Wi-Fi networks
  Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
  discovery
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Acquires the wake lock
- Checks if the internet connection is available
  discovery
- Reads information about phone network operator.
  discovery
behavioral1