55035f4bb41653c94b75d256176bde55dcdb543dc73df7b329a436d5ff7500ee

General

Target

6d12a0ba5958ef60908946d1c9687fe6_JaffaCakes118
Size

30.8MB
Sample

240524-c3fc4sab9v
MD5

6d12a0ba5958ef60908946d1c9687fe6
SHA1

ea745933444cedc6aab302296e58e8268021f038
SHA256

55035f4bb41653c94b75d256176bde55dcdb543dc73df7b329a436d5ff7500ee
SHA512

ffe3999f80b53769b56c148e8697a030ca3cca167af892c7ba33b0e7191f0a4a440ee86828deab9148cf83eaaff0bf624e6321815e20e2f04e4c4d9baf919dcd
SSDEEP

786432:C+HOYbTV6A7GlFTUb4QU8Tw/sat1+T9+2ZV:pHOYXeFTQU8Sz+p+M

Score

8^/10

Malware Config

Targets

- Target
  
  6d12a0ba5958ef60908946d1c9687fe6_JaffaCakes118
- Size
  
  30.8MB
- MD5
  
  6d12a0ba5958ef60908946d1c9687fe6
- SHA1
  
  ea745933444cedc6aab302296e58e8268021f038
- SHA256
  
  55035f4bb41653c94b75d256176bde55dcdb543dc73df7b329a436d5ff7500ee
- SHA512
  
  ffe3999f80b53769b56c148e8697a030ca3cca167af892c7ba33b0e7191f0a4a440ee86828deab9148cf83eaaff0bf624e6321815e20e2f04e4c4d9baf919dcd
- SSDEEP
  
  786432:C+HOYbTV6A7GlFTUb4QU8Tw/sat1+T9+2ZV:pHOYXeFTQU8Sz+p+M
Score

8^/10

collection discovery evasion impact persistence
- Checks if the Android device is rooted.
  evasion
- Requests cell location
  Uses Android APIs to to get current cell information.
  collection discovery
- Requests cell location
  Uses Android APIs to to get current cell location.
  collection discovery evasion
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries information about the current nearby Wi-Fi networks
  Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Checks if the internet connection is available
  discovery
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
- Reads information about phone network operator.
  discovery
- Listens for changes in the sensor environment (might be used to detect emulation)
  evasion
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

Checks if the Android device is rooted.

Requests cell location

Requests cell location

Checks memory information

Queries information about running processes on the device

Queries information about the current Wi-Fi connection

Queries information about the current nearby Wi-Fi networks

Registers a broadcast receiver at runtime (usually for listening for system events)

Checks if the internet connection is available

Queries the unique device ID (IMEI, MEID, IMSI)

Reads information about phone network operator.

Listens for changes in the sensor environment (might be used to detect emulation)

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2