General

  • Target

    6edebb23c8b6e3e18d4fbc1a05944082_JaffaCakes118

  • Size

    31.4MB

  • Sample

    240524-r3pdcahe8z

  • MD5

    6edebb23c8b6e3e18d4fbc1a05944082

  • SHA1

    09a149690e889a8e4209159cedd79ada99cc329c

  • SHA256

    c418a39ac3d94d029b8f052c21c8f6a74a321e4224418c6be7532538f4f411df

  • SHA512

    f1c4ff6c719efbbdfa6fec7d573a5585634f866a794629d3aa8932014bd35b92867e9d93ddb74e36d49e281de6ebd237542df865dff7fe436fb404cd3d205970

  • SSDEEP

    393216:SHcacRdxDzhbZKaqaPtiQtPX6ltsXWKHby27Iwoi47wg2JL4baLWQzYk1TPuc4Nt:9vNzdIaFZX6le7y2cDi/peJk1JGDsbS

Malware Config

Targets

    • Target

      6edebb23c8b6e3e18d4fbc1a05944082_JaffaCakes118

    • Size

      31.4MB

    • MD5

      6edebb23c8b6e3e18d4fbc1a05944082

    • SHA1

      09a149690e889a8e4209159cedd79ada99cc329c

    • SHA256

      c418a39ac3d94d029b8f052c21c8f6a74a321e4224418c6be7532538f4f411df

    • SHA512

      f1c4ff6c719efbbdfa6fec7d573a5585634f866a794629d3aa8932014bd35b92867e9d93ddb74e36d49e281de6ebd237542df865dff7fe436fb404cd3d205970

    • SSDEEP

      393216:SHcacRdxDzhbZKaqaPtiQtPX6ltsXWKHby27Iwoi47wg2JL4baLWQzYk1TPuc4Nt:9vNzdIaFZX6le7y2cDi/peJk1JGDsbS

    • Checks if the Android device is rooted.

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks if the internet connection is available

    • Listens for changes in the sensor environment (might be used to detect emulation)

MITRE ATT&CK Matrix

Tasks