irata | 89045f7c687bd704e7c06e065bb0c2371bbadbc9a702b2c75944cdcbbcf153ad

Sharing

Copy URL

Twitter E-mail

General

Target

6e7a2ce4e84d3902614490971e3cd58e_JaffaCakes118
Size

31.4MB
Sample

240524-pc65csab4v
MD5

6e7a2ce4e84d3902614490971e3cd58e
SHA1

2704b4dc51c3b31a6df74dc993b6144d2eb62303
SHA256

89045f7c687bd704e7c06e065bb0c2371bbadbc9a702b2c75944cdcbbcf153ad
SHA512

b5b720da1ed3a9c2375aba0694628a12b77f0253f2129e2cb4a8894946a9647173d08f747b8aab17faad527fb152403dc67cf7ddafde3028f59d1df7a2c67e0e
SSDEEP

786432:0ZuIJzWNSJwAona707SNhfXPUaucJX/UyJzCSiE:iuIJzWNSJwHa47SfMau6X/Uy9X

Score

10^/10

Malware Config

Targets

- Target
  
  6e7a2ce4e84d3902614490971e3cd58e_JaffaCakes118
- Size
  
  31.4MB
- MD5
  
  6e7a2ce4e84d3902614490971e3cd58e
- SHA1
  
  2704b4dc51c3b31a6df74dc993b6144d2eb62303
- SHA256
  
  89045f7c687bd704e7c06e065bb0c2371bbadbc9a702b2c75944cdcbbcf153ad
- SHA512
  
  b5b720da1ed3a9c2375aba0694628a12b77f0253f2129e2cb4a8894946a9647173d08f747b8aab17faad527fb152403dc67cf7ddafde3028f59d1df7a2c67e0e
- SSDEEP
  
  786432:0ZuIJzWNSJwAona707SNhfXPUaucJX/UyJzCSiE:iuIJzWNSJwHa47SfMau6X/Uy9X
Score

8^/10

banker discovery evasion impact persistence
- Checks if the Android device is rooted.
  evasion
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries the mobile country code (MCC)
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Checks if the internet connection is available
  discovery
- Reads information about phone network operator.
  discovery
behavioral1
- Target
  
  gdtadv2.jar
- Size
  
  468KB
- MD5
  
  6bfe094580c89ba696ef8772de47a552
- SHA1
  
  210bc4afce84b6e6bb36f97f68f9d3d9d3432643
- SHA256
  
  a884e386bf4ec066c9a82518c354be513182add87107552b1f4cf33dc80bddd4
- SHA512
  
  7ae8c9210957f06eb177fa0472ac1fcf80f0e6b1f308ec1906fe059c38623e404b37c34d9e8702cab66efc7ebfdc5400f1506db89b75a5fd1dd915ec2c2086a5
- SSDEEP
  
  6144:Nz015KiQP/B4tKQ3OTNgdJHqn+9ZMsH5EK9JKp0KMNd4IoCJlv0gxWky9+T2k57:N/Z/B/NgdliEZMs9JhZ4kykTlJ
Score

1^/10
behavioral2

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

Checks if the Android device is rooted.

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Checks CPU information

Checks memory information

Queries information about running processes on the device

Queries information about the current Wi-Fi connection

Queries the mobile country code (MCC)

Registers a broadcast receiver at runtime (usually for listening for system events)

Checks if the internet connection is available

Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2