General

  • Target

    7367ac13488c3c54ca7915169adb73ee_JaffaCakes118

  • Size

    3.3MB

  • Sample

    240525-12g3bacg53

  • MD5

    7367ac13488c3c54ca7915169adb73ee

  • SHA1

    3d28b782f0fec787d097e2a8eae1539d340d7fdb

  • SHA256

    f4dbe84132e147440d8561a08bd9199d6102fea686735ffe936b0d5d6364e6b4

  • SHA512

    befbbdcf4c9edc46550126c090e42cb24a6ba0dbfb97d0eb3f11cc81045235580dc05a473a5f327245aa3994064c3479d97d011e6f0f26609552be0790f019a6

  • SSDEEP

    98304:xugfuWWFkFL7EBasOqFRl8Fr24J73DwpwOtywXN3XWiBj3T:xvLWOLpEcJpXq

Malware Config

Targets

    • Target

      7367ac13488c3c54ca7915169adb73ee_JaffaCakes118

    • Size

      3.3MB

    • MD5

      7367ac13488c3c54ca7915169adb73ee

    • SHA1

      3d28b782f0fec787d097e2a8eae1539d340d7fdb

    • SHA256

      f4dbe84132e147440d8561a08bd9199d6102fea686735ffe936b0d5d6364e6b4

    • SHA512

      befbbdcf4c9edc46550126c090e42cb24a6ba0dbfb97d0eb3f11cc81045235580dc05a473a5f327245aa3994064c3479d97d011e6f0f26609552be0790f019a6

    • SSDEEP

      98304:xugfuWWFkFL7EBasOqFRl8Fr24J73DwpwOtywXN3XWiBj3T:xvLWOLpEcJpXq

    • Checks if the Android device is rooted.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks if the internet connection is available

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

    • Schedules tasks to execute at a specified time

      Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

MITRE ATT&CK Mobile v15

Tasks