12a1949dfe3e34358a15cc8384bc0dd87be8c1d145645f69a2f52689f01bf6f8

General

Target

86676516144a25f6e6fa5441f3c9e666_JaffaCakes118
Size

27.8MB
Sample

240531-kkbwzacf4y
MD5

86676516144a25f6e6fa5441f3c9e666
SHA1

4c18c02872c6a5ce8b7a484efbf7cd6c169cfe0d
SHA256

12a1949dfe3e34358a15cc8384bc0dd87be8c1d145645f69a2f52689f01bf6f8
SHA512

7c33d2d92f8e8c02e95000d320e3718c291adae222ea26caee59c289f00ea8c1bdb1fe95c70f075dbaa01551e48d6062d1ccfcc2491f131dc117e576fb8fa847
SSDEEP

786432:7d+CaDVIkEppqZMqrZ3Br6NsxXFQb2Ksk4FgD:7d+CaREetW6hFEfTFD

Score

8^/10

Malware Config

Targets

- Target
  
  86676516144a25f6e6fa5441f3c9e666_JaffaCakes118
- Size
  
  27.8MB
- MD5
  
  86676516144a25f6e6fa5441f3c9e666
- SHA1
  
  4c18c02872c6a5ce8b7a484efbf7cd6c169cfe0d
- SHA256
  
  12a1949dfe3e34358a15cc8384bc0dd87be8c1d145645f69a2f52689f01bf6f8
- SHA512
  
  7c33d2d92f8e8c02e95000d320e3718c291adae222ea26caee59c289f00ea8c1bdb1fe95c70f075dbaa01551e48d6062d1ccfcc2491f131dc117e576fb8fa847
- SSDEEP
  
  786432:7d+CaDVIkEppqZMqrZ3Br6NsxXFQb2Ksk4FgD:7d+CaREetW6hFEfTFD
Score

8^/10

banker collection discovery evasion impact persistence
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Requests cell location
  Uses Android APIs to to get current cell location.
  collection discovery evasion
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries information about the current nearby Wi-Fi networks
  Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
  discovery
- Queries the mobile country code (MCC)
  discovery
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Checks if the internet connection is available
  discovery
- Reads information about phone network operator.
  discovery
behavioral1