General

  • Target

    6e485cb48d5e4c80c5cbba399d51b2ff_JaffaCakes118

  • Size

    7.4MB

  • Sample

    240524-m5qxqsef74

  • MD5

    6e485cb48d5e4c80c5cbba399d51b2ff

  • SHA1

    d5bb78e613baf3be7b0a26340aabd12e04b763a5

  • SHA256

    6ddc4d72f23b8140d59d368ed69d9a8c3fb40f8cebb2894b8787d342fccb53b1

  • SHA512

    ece4d4b259dd8e6757db0efd7ae263fcbadf2c0370d09b3413fe3aacd7adf0214c93ec4a79beb333bd670515c08fab00cce6926814c807856fe6da7548f5c8b2

  • SSDEEP

    196608:5C4LLGWdmKO0JBThRI+W5zT1cYPPGKzZut:5ZGWmu9Q+W5HCYPgt

Malware Config

Targets

    • Target

      6e485cb48d5e4c80c5cbba399d51b2ff_JaffaCakes118

    • Size

      7.4MB

    • MD5

      6e485cb48d5e4c80c5cbba399d51b2ff

    • SHA1

      d5bb78e613baf3be7b0a26340aabd12e04b763a5

    • SHA256

      6ddc4d72f23b8140d59d368ed69d9a8c3fb40f8cebb2894b8787d342fccb53b1

    • SHA512

      ece4d4b259dd8e6757db0efd7ae263fcbadf2c0370d09b3413fe3aacd7adf0214c93ec4a79beb333bd670515c08fab00cce6926814c807856fe6da7548f5c8b2

    • SSDEEP

      196608:5C4LLGWdmKO0JBThRI+W5zT1cYPPGKzZut:5ZGWmu9Q+W5HCYPgt

    • Checks Android system properties for emulator presence.

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the mobile country code (MCC)

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks if the internet connection is available

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks