General

  • Target

    8c2867f607b5c4e6f54a2c7258f81d54_JaffaCakes118

  • Size

    2.3MB

  • Sample

    240601-3fv36aaf3y

  • MD5

    8c2867f607b5c4e6f54a2c7258f81d54

  • SHA1

    91f0152bec65ceeb7d5dd645532b988af3cfca7f

  • SHA256

    e2f2bdb78c5d19ae59f09de2dece111f47f339251b4df504798528ffc79205e0

  • SHA512

    0184441c718d0467273fc3f146c1c18a9c5c3cee9f2323002c81bc5eda4cd0fca06dba20e826e8ae3b3e82ff54f9a6ebaaa772dd5959035a1e75ae644e640350

  • SSDEEP

    49152:GtKErVmiC9K0v8M4l22nDYWl2sbNjY745FCFnctDspnQ/:GUz9KGK22nDYqbNjj5FCFncH

Malware Config

Targets

    • Target

      8c2867f607b5c4e6f54a2c7258f81d54_JaffaCakes118

    • Size

      2.3MB

    • MD5

      8c2867f607b5c4e6f54a2c7258f81d54

    • SHA1

      91f0152bec65ceeb7d5dd645532b988af3cfca7f

    • SHA256

      e2f2bdb78c5d19ae59f09de2dece111f47f339251b4df504798528ffc79205e0

    • SHA512

      0184441c718d0467273fc3f146c1c18a9c5c3cee9f2323002c81bc5eda4cd0fca06dba20e826e8ae3b3e82ff54f9a6ebaaa772dd5959035a1e75ae644e640350

    • SSDEEP

      49152:GtKErVmiC9K0v8M4l22nDYWl2sbNjY745FCFnctDspnQ/:GUz9KGK22nDYqbNjj5FCFncH

    • Checks if the Android device is rooted.

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    • Queries the mobile country code (MCC)

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks if the internet connection is available

    • Listens for changes in the sensor environment (might be used to detect emulation)

MITRE ATT&CK Mobile v15

Tasks