General

  • Target

    6d8f4e307d84deebc129be740d88b08a_JaffaCakes118

  • Size

    12.0MB

  • Sample

    240524-gyvpfsgb4w

  • MD5

    6d8f4e307d84deebc129be740d88b08a

  • SHA1

    200008c648b98040a58abe099d4e9f9499704fa6

  • SHA256

    c17eaff4e8e82177e2aafcd4e64c4ddaab2b11977a28ef1bd2d1849400a7d695

  • SHA512

    3781539b6f3537f35cd71ef91f7fd121871a42ecbdf1ebcd51d3b008ff5ab07d052d923b0d370b674365fb4b840269876d2512e8da110dc65375b20c3fd183c9

  • SSDEEP

    196608:c46nSA1iSHvcpnu1hE/eivgkcG5nf80mrIijQBfliWXjPWKTp:FWV1hE/Z55nf805iEdliEjWu

Malware Config

Targets

    • Target

      6d8f4e307d84deebc129be740d88b08a_JaffaCakes118

    • Size

      12.0MB

    • MD5

      6d8f4e307d84deebc129be740d88b08a

    • SHA1

      200008c648b98040a58abe099d4e9f9499704fa6

    • SHA256

      c17eaff4e8e82177e2aafcd4e64c4ddaab2b11977a28ef1bd2d1849400a7d695

    • SHA512

      3781539b6f3537f35cd71ef91f7fd121871a42ecbdf1ebcd51d3b008ff5ab07d052d923b0d370b674365fb4b840269876d2512e8da110dc65375b20c3fd183c9

    • SSDEEP

      196608:c46nSA1iSHvcpnu1hE/eivgkcG5nf80mrIijQBfliWXjPWKTp:FWV1hE/Z55nf805iEdliEjWu

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries the mobile country code (MCC)

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks if the internet connection is available

    • Reads information about phone network operator.

    • Checks the presence of a debugger

MITRE ATT&CK Matrix

Tasks