General

  • Target

    6e4799ab938068599bd993e79a145298_JaffaCakes118

  • Size

    3.1MB

  • Sample

    240524-m5awhsef65

  • MD5

    6e4799ab938068599bd993e79a145298

  • SHA1

    6893c9dd45a70311313d83dec12f919519e94e79

  • SHA256

    7bf943484defa524df2f1907f52b9bbca8656d716efb9dfed8e581501e0fa9cd

  • SHA512

    602c20243b6b73251d8d54a2022ba6a5f431baa90fa60ef6c3f9cd2af62730dd857f5f82b104addcb7b6614f5161d9e4506f8cbe877a498f6a0cc0402afd061b

  • SSDEEP

    98304:+Lv0jcB/u3eccmROZEostBwi6KcOJoCdPTEmqY9lcQmXN6nc:ImHjUstmiLcOaY9RmXv

Malware Config

Targets

    • Target

      6e4799ab938068599bd993e79a145298_JaffaCakes118

    • Size

      3.1MB

    • MD5

      6e4799ab938068599bd993e79a145298

    • SHA1

      6893c9dd45a70311313d83dec12f919519e94e79

    • SHA256

      7bf943484defa524df2f1907f52b9bbca8656d716efb9dfed8e581501e0fa9cd

    • SHA512

      602c20243b6b73251d8d54a2022ba6a5f431baa90fa60ef6c3f9cd2af62730dd857f5f82b104addcb7b6614f5161d9e4506f8cbe877a498f6a0cc0402afd061b

    • SSDEEP

      98304:+Lv0jcB/u3eccmROZEostBwi6KcOJoCdPTEmqY9lcQmXN6nc:ImHjUstmiLcOaY9RmXv

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Queries the phone number (MSISDN for GSM devices)

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Acquires the wake lock

    • Checks if the internet connection is available

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

    • Listens for changes in the sensor environment (might be used to detect emulation)

MITRE ATT&CK Matrix

Tasks