General
- Target 79d3447cb6633c9fe6e0d53d6aa20977_JaffaCakes118
- Size 26.9MB
- Sample240527-vglbcabh67
- SHA256 187f920065a37b54a8c6786ae1d53aaa6fc53ba35ce3e0b74f36ed24f2a89349
- MD5 79d3447cb6633c9fe6e0d53d6aa20977
- SHA1 1e3b8b963622543a3713d20ed92630e4e603c808
- SHA512 8dde05fd650eccd917bbc93dd1690ea0229fd30d708b5858d1cc1efecbed158f261c939c44f0dafb2fea292a1fdd19fed35632eed639c8ee85ab20455738fa48
- SSDEEP 786432:AVTLz8lg/W04kH4yDZ8HdUF1jNqAddoY8G:UQoWhI40uHmFBAAdZZ
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 79d3447cb6633c9fe6e0d53d6aa20977_JaffaCakes118
- Size 26.9MB
- SHA256 187f920065a37b54a8c6786ae1d53aaa6fc53ba35ce3e0b74f36ed24f2a89349
- MD5 79d3447cb6633c9fe6e0d53d6aa20977
- SHA1 1e3b8b963622543a3713d20ed92630e4e603c808
- SHA512 8dde05fd650eccd917bbc93dd1690ea0229fd30d708b5858d1cc1efecbed158f261c939c44f0dafb2fea292a1fdd19fed35632eed639c8ee85ab20455738fa48
- SSDEEP 786432:AVTLz8lg/W04kH4yDZ8HdUF1jNqAddoY8G:UQoWhI40uHmFBAAdZZ
- MD5 SHA1 SHA512 SSDEEP
-
Checks Android system properties for emulator presence.
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Registers a broadcast receiver at runtime (usually for listening for system events)
-
Acquires the wake lock
-
Checks if the internet connection is available
-
Schedules tasks to execute at a specified time
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Scheduled Task/Job
1Defense Evasion
Foreground Persistence
1Virtualization/Sandbox Evasion
2System Checks
2