General

  • Target

    6ec513634575a9bdd5dd20fad7529ed5_JaffaCakes118

  • Size

    4.7MB

  • Sample

    240524-rd1ebagg23

  • MD5

    6ec513634575a9bdd5dd20fad7529ed5

  • SHA1

    aae4142ffa051aa5b16a3004309dacfdb9e883eb

  • SHA256

    863352633ac896a6a3a2eae5c95ffa6e276c7f7e25a825d8a5197cd2b48d59a8

  • SHA512

    f1f2db7f9e40920b164c7ee88ccd663c3604acba5b1f51713ec990876650060119b969ef2a7e2bfafff52eebc5a0c27a96f1e8acab98bb66d881ab8e2570f801

  • SSDEEP

    98304:HHafc4//i3tWaVgFaX36mkuKPVmP37yZUJKMtXVbCdo1ilc268fSJRX++5Be:HHI/iBKFaXSUGZUKMrnw626tvXfS

Malware Config

Targets

    • Target

      6ec513634575a9bdd5dd20fad7529ed5_JaffaCakes118

    • Size

      4.7MB

    • MD5

      6ec513634575a9bdd5dd20fad7529ed5

    • SHA1

      aae4142ffa051aa5b16a3004309dacfdb9e883eb

    • SHA256

      863352633ac896a6a3a2eae5c95ffa6e276c7f7e25a825d8a5197cd2b48d59a8

    • SHA512

      f1f2db7f9e40920b164c7ee88ccd663c3604acba5b1f51713ec990876650060119b969ef2a7e2bfafff52eebc5a0c27a96f1e8acab98bb66d881ab8e2570f801

    • SSDEEP

      98304:HHafc4//i3tWaVgFaX36mkuKPVmP37yZUJKMtXVbCdo1ilc268fSJRX++5Be:HHI/iBKFaXSUGZUKMrnw626tvXfS

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks if the internet connection is available

MITRE ATT&CK Matrix

Tasks