General
- Target 7ce8be1d33d389bdaea32465ec75274a_JaffaCakes118
- Size 2.6MB
- Sample240528-pd4evsde95
- SHA256 bace9727a74562c43b0e387ef1771dcc10268a826a730f56c4083e3bdb9db58b
- MD5 7ce8be1d33d389bdaea32465ec75274a
- SHA1 6239b2bedd5f10467c4bf792a18de73e8c073c53
- SHA512 ee7ba3e45f1d79b1b16fb07552a4ef34369d23da8c92d03fc02aa206d8293933a0068fa3d217f3dd2096c7821357ad149be7e11fe63741f268942596964eaa0f
- SSDEEP 49152:m73Ei2Lnu2S9xphxvrymYb84stvCj/CeGyDtUGAUe7NqOZDnCuhOPEL+DV2s7qmW:038u2SkmY3s5yPAJqO5CuMR2SjF+t4k
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
7ce8be1d33d389bdaea32465ec75274a_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
7ce8be1d33d389bdaea32465ec75274a_JaffaCakes118.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral3
Sample
7ce8be1d33d389bdaea32465ec75274a_JaffaCakes118.apk
Resource
android-x64-arm64-20240514-en
Malware Config
Targets
-
- Target 7ce8be1d33d389bdaea32465ec75274a_JaffaCakes118
- Size 2.6MB
- SHA256 bace9727a74562c43b0e387ef1771dcc10268a826a730f56c4083e3bdb9db58b
- MD5 7ce8be1d33d389bdaea32465ec75274a
- SHA1 6239b2bedd5f10467c4bf792a18de73e8c073c53
- SHA512 ee7ba3e45f1d79b1b16fb07552a4ef34369d23da8c92d03fc02aa206d8293933a0068fa3d217f3dd2096c7821357ad149be7e11fe63741f268942596964eaa0f
- SSDEEP 49152:m73Ei2Lnu2S9xphxvrymYb84stvCj/CeGyDtUGAUe7NqOZDnCuhOPEL+DV2s7qmW:038u2SkmY3s5yPAJqO5CuMR2SjF+t4k
- MD5 SHA1 SHA512 SSDEEP
-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries information about the current nearby Wi-Fi networks
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
-
Queries the mobile country code (MCC)
-
Registers a broadcast receiver at runtime (usually for listening for system events)
-
Checks if the internet connection is available
-
Listens for changes in the sensor environment (might be used to detect emulation)