Overview

overview

7

Static

static

6

6e267522ba...18.apk

android-9-x86

1

bdxadsdk.apk

android-9-x86

bdxadsdk.apk

android-10-x64

bdxadsdk.apk

android-11-x64

gdtadv2.apk

android-9-x86

wmdex.apk

android-9-x86

7

wmdex.apk

android-10-x64

7

wmdex.apk

android-11-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6e267522ba968f49054fd2a918260550_JaffaCakes118

  • Size

    30.7MB

  • Sample

    240524-l6jdlsdc71

  • MD5

    6e267522ba968f49054fd2a918260550

  • SHA1

    6ac6d9afdcefac17a5329e3ecac144600acc20bd

  • SHA256

    568de3c7fb984e6ef7ccaab250569a7089dcff99363dfa893d8a1b7907ae738f

  • SHA512

    bad793974eea35ae2a440cd50c14007122e08ab6f3eb9e600865784bb3b6062b77db4880890a9b94d8ef0055541f269e8574f20cf43fd3449d78ebd4a243385e

  • SSDEEP

    786432:x3TZhNo8B1hLy6FgjzyR4NRJBI7lTrJVsQ1Je:x3Pr151ej04Nb27NrJT1Je

Score
7/10
androidcollectioncredential_accessdiscoveryevasionimpactpersistence

Malware Config

Targets

    • Target

      6e267522ba968f49054fd2a918260550_JaffaCakes118

    • Size

      30.7MB

    • MD5

      6e267522ba968f49054fd2a918260550

    • SHA1

      6ac6d9afdcefac17a5329e3ecac144600acc20bd

    • SHA256

      568de3c7fb984e6ef7ccaab250569a7089dcff99363dfa893d8a1b7907ae738f

    • SHA512

      bad793974eea35ae2a440cd50c14007122e08ab6f3eb9e600865784bb3b6062b77db4880890a9b94d8ef0055541f269e8574f20cf43fd3449d78ebd4a243385e

    • SSDEEP

      786432:x3TZhNo8B1hLy6FgjzyR4NRJBI7lTrJVsQ1Je:x3Pr151ej04Nb27NrJT1Je

    Score
    1/10
    behavioral1

    • Target

      bdxadsdk.jar

    • Size

      485KB

    • MD5

      3be5368946ad9cbe671430c7a098d82a

    • SHA1

      c7255fc28d0f148d36a7f1434c65a35fbcc56c86

    • SHA256

      5a2b63efa0438bd7be208ea920b55ef6963621bd5812764f11d4c8a3d9b2844b

    • SHA512

      6b2d7795683d1bffcaa0ee929371bbaf954f7c213e8a0246f2f65529ab01fc3a11897c16bc0c932e3b615ff6a7bcd8a54f3fe0f156a5d8ef39de83d5bb0be069

    • SSDEEP

      6144:BEmGAmxIj99SrSwWFwwaVGwLThKi6LfTGuPy81JVsI5FL03w7L0IzYtZXE0Q9Pfd:ePXo99DlOw61hKpJ9frsgHnq059PB77v

    Score
    1/10
    behavioral2behavioral3behavioral4

    • Target

      gdtadv2.jar

    • Size

      1.3MB

    • MD5

      870df503a87a4edeeec9379c2579c74d

    • SHA1

      32475ba6c71bd4e4aa155284142fa31132c1c560

    • SHA256

      d7d59126cbbb6d786d12fabfb5eb16eb3f072751bde46ca3ac94d70c8a635a61

    • SHA512

      7af5475ddc6eb6da04b91e630a460f029f8166c48b301a752800e5c88e4034940b1fc7677c2851d971c15bae24f4aca429f5bb60f04766649c09181553362f03

    • SSDEEP

      24576:d8OxC4nGRdu5MlykFtwn3TjXmVMBQcigoMD05SV3E/0e0AKNveV1O/nd2ZsKbnhX:7tGfl7wn3XoQ1oMDyGE+AMveV8/ndmso

    Score
    1/10
    behavioral5

    • Target

      wmdex.jar

    • Size

      218KB

    • MD5

      10f86308007af214ab91bb51959e79b2

    • SHA1

      e5941345f960034d35e0652bc7fc76e95d99773a

    • SHA256

      56a0b304c8c0bd513090e2b1014012f33b0dd600c0a3476bbef262dc22119192

    • SHA512

      d65db3d4e552288246f13ae3370a0940b24b978c8e71f7eb5bde05ca55fb731f2e9ac6946ec1327a28f73f4cd10c66255dff472c9cdfe357b97b6630ebb73d54

    • SSDEEP

      6144:K7u/DHpzqpdlFDQ2wfslBJR+D7hv/F6A8DykFr:2u/DHhqpNafslf6dAYkFr

    Score
    7/10
    discoveryevasionpersistencecollectioncredential_accessimpact

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

      evasiondiscovery

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

      collectioncredential_accessimpact

    • Queries the mobile country code (MCC)

      discovery

    • Registers a broadcast receiver at runtime (usually for listening for system events)

      persistence
    behavioral6behavioral7behavioral8

MITRE ATT&CK Matrix

Tasks