4f729f2722e1e27fc937cd151c283c3b9b9baa4808c5a292f2f7f07c487aa35c

General

Target

6e2e6d7c57a2dcb9699a034e33fa39eb_JaffaCakes118
Size

12.7MB
Sample

240524-mdeemadf45
MD5

6e2e6d7c57a2dcb9699a034e33fa39eb
SHA1

33b09c087ef7d2b0fe65db6a0e2e162838a798c6
SHA256

4f729f2722e1e27fc937cd151c283c3b9b9baa4808c5a292f2f7f07c487aa35c
SHA512

68141a7648b4f9177e7fb23f7f048a7a2c9dd52a51aa64ca9497a35c8a4e500bfece89c9601565166f7e28a4a9c51e429b466f84e01052fa16cd21080bea4bad
SSDEEP

393216:6AfNc83QqXjifbdsia9n9L3bWu9+fx+vGwS1120p9s:fN34sT9L3bW7wOwS1125

Score

8^/10

Malware Config

Targets

- Target
  
  6e2e6d7c57a2dcb9699a034e33fa39eb_JaffaCakes118
- Size
  
  12.7MB
- MD5
  
  6e2e6d7c57a2dcb9699a034e33fa39eb
- SHA1
  
  33b09c087ef7d2b0fe65db6a0e2e162838a798c6
- SHA256
  
  4f729f2722e1e27fc937cd151c283c3b9b9baa4808c5a292f2f7f07c487aa35c
- SHA512
  
  68141a7648b4f9177e7fb23f7f048a7a2c9dd52a51aa64ca9497a35c8a4e500bfece89c9601565166f7e28a4a9c51e429b466f84e01052fa16cd21080bea4bad
- SSDEEP
  
  393216:6AfNc83QqXjifbdsia9n9L3bWu9+fx+vGwS1120p9s:fN34sT9L3bW7wOwS1125
Score

8^/10

banker discovery evasion impact persistence
- Checks if the Android device is rooted.
  evasion
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries the mobile country code (MCC)
  discovery
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Checks if the internet connection is available
  discovery
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
behavioral1
- Target
  
  bdxadsdk.jar
- Size
  
  485KB
- MD5
  
  3be5368946ad9cbe671430c7a098d82a
- SHA1
  
  c7255fc28d0f148d36a7f1434c65a35fbcc56c86
- SHA256
  
  5a2b63efa0438bd7be208ea920b55ef6963621bd5812764f11d4c8a3d9b2844b
- SHA512
  
  6b2d7795683d1bffcaa0ee929371bbaf954f7c213e8a0246f2f65529ab01fc3a11897c16bc0c932e3b615ff6a7bcd8a54f3fe0f156a5d8ef39de83d5bb0be069
- SSDEEP
  
  6144:BEmGAmxIj99SrSwWFwwaVGwLThKi6LfTGuPy81JVsI5FL03w7L0IzYtZXE0Q9Pfd:ePXo99DlOw61hKpJ9frsgHnq059PB77v
Score

1^/10
behavioral2 behavioral3 behavioral4
- Target
  
  gdtadv2.jar
- Size
  
  650KB
- MD5
  
  5eaa0ab055f88d1710a1c680cced039d
- SHA1
  
  3cd78c640c175d8f41c981dec45da2e0671659fa
- SHA256
  
  629ce3d46af2e307c50aa0a8b6a4649c07f15c9bb0ab074dc9e3c42d452223c5
- SHA512
  
  fa0e514c183962c89a2f27d680768542628a031312300de7d1574490920057975f227fe9e95e2a1c3cef399f755686b40ca926a4db6e582f7c5a07277f072c13
- SSDEEP
  
  12288:2o/eAqlTYNTbHulJeTcMZH2rNp8OwazS5skPAZl9xHlUaE3OdKFwEUSsielxE:2o/ea32e4MZH2rNpHwsbkPApp1qwNSsw
Score

1^/10
behavioral5