General

  • Target

    6ddf697f91f1641eb996a569bedbf2bb_JaffaCakes118

  • Size

    6.5MB

  • Sample

    240524-j9363sba61

  • MD5

    6ddf697f91f1641eb996a569bedbf2bb

  • SHA1

    e954b0e852304fa2d000f919537c03cf8226eed6

  • SHA256

    1f3f7cd20803b59b5aa5894f9f90940f24cafe8fb7b5ffe77cfff09e1b3e2e7e

  • SHA512

    3ff60e10d908d91d9107e5f7337a5104a04b25b36e10ff7291057ce247a5a205e4d35ba341d9b9606d7f7c0800091c7fd2006094396cbd131518e18c686899b8

  • SSDEEP

    196608:Woz9N4MOAa2AcNZD0hic3GjTcEeNM9VbRIM:pfhUmH5gMTRL

Malware Config

Targets

    • Target

      6ddf697f91f1641eb996a569bedbf2bb_JaffaCakes118

    • Size

      6.5MB

    • MD5

      6ddf697f91f1641eb996a569bedbf2bb

    • SHA1

      e954b0e852304fa2d000f919537c03cf8226eed6

    • SHA256

      1f3f7cd20803b59b5aa5894f9f90940f24cafe8fb7b5ffe77cfff09e1b3e2e7e

    • SHA512

      3ff60e10d908d91d9107e5f7337a5104a04b25b36e10ff7291057ce247a5a205e4d35ba341d9b9606d7f7c0800091c7fd2006094396cbd131518e18c686899b8

    • SSDEEP

      196608:Woz9N4MOAa2AcNZD0hic3GjTcEeNM9VbRIM:pfhUmH5gMTRL

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries the mobile country code (MCC)

    • Queries the phone number (MSISDN for GSM devices)

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks if the internet connection is available

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks