General

  • Target

    6a9cf8215bdfb87453db554a49fad5ba_JaffaCakes118

  • Size

    6.6MB

  • Sample

    240523-matedach53

  • MD5

    6a9cf8215bdfb87453db554a49fad5ba

  • SHA1

    7c841465ab6da70704e4bfbd117343e0f4719ec8

  • SHA256

    4f0d5509e791d7294fb1f7f5cbdcaa21c79831db0e1a13445c571237e5d2764c

  • SHA512

    d8b72540f828db81c9a30178c4e8b5ffd7bca061d33ac58f83c3913a61a72d32306cdf5e5afe2359ade22cfd1abf12423a885f3b957e6490cafac5c1b87e3c62

  • SSDEEP

    196608:VmxIFSSQqxQ4ok/Z/YApLqRscHnPYktAg4Wv+sQpmN:VmxIFSSQEQ49ZJAHPYpMsmN

Malware Config

Targets

    • Target

      6a9cf8215bdfb87453db554a49fad5ba_JaffaCakes118

    • Size

      6.6MB

    • MD5

      6a9cf8215bdfb87453db554a49fad5ba

    • SHA1

      7c841465ab6da70704e4bfbd117343e0f4719ec8

    • SHA256

      4f0d5509e791d7294fb1f7f5cbdcaa21c79831db0e1a13445c571237e5d2764c

    • SHA512

      d8b72540f828db81c9a30178c4e8b5ffd7bca061d33ac58f83c3913a61a72d32306cdf5e5afe2359ade22cfd1abf12423a885f3b957e6490cafac5c1b87e3c62

    • SSDEEP

      196608:VmxIFSSQqxQ4ok/Z/YApLqRscHnPYktAg4Wv+sQpmN:VmxIFSSQEQ49ZJAHPYpMsmN

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Queries account information for other applications stored on the device

      Application may abuse the framework's APIs to collect account information stored on the device.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the phone number (MSISDN for GSM devices)

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks if the internet connection is available

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks