General

  • Target

    89c76c2b79fd580ef267f0d234f50946_JaffaCakes118

  • Size

    10.3MB

  • Sample

    240601-jjv3safb73

  • MD5

    89c76c2b79fd580ef267f0d234f50946

  • SHA1

    7eb39b77d3ee5c0e1fffdecf5d55a634d5e2e1e5

  • SHA256

    bfc09cd5882ac31c2ea7a2de8bcc50fb5830a173020e1a896916f54de6046842

  • SHA512

    769deefbf32596da27da78e0d2a2f2ee3dd09a30a3d2539d68bec811ec257fe9caf317824f2920f88b02ff43f952cd9a9f577a72cfee570c1479c30b1637886d

  • SSDEEP

    196608:+7Rb7Z7WbGN1SVVYvIJqEZqu5fbeFRnjE1cpEdNkJknUIVpg39JfWLkYG5H:I97Z79mXEol5fKzjE+pEdaJQFExf5H

Malware Config

Targets

    • Target

      89c76c2b79fd580ef267f0d234f50946_JaffaCakes118

    • Size

      10.3MB

    • MD5

      89c76c2b79fd580ef267f0d234f50946

    • SHA1

      7eb39b77d3ee5c0e1fffdecf5d55a634d5e2e1e5

    • SHA256

      bfc09cd5882ac31c2ea7a2de8bcc50fb5830a173020e1a896916f54de6046842

    • SHA512

      769deefbf32596da27da78e0d2a2f2ee3dd09a30a3d2539d68bec811ec257fe9caf317824f2920f88b02ff43f952cd9a9f577a72cfee570c1479c30b1637886d

    • SSDEEP

      196608:+7Rb7Z7WbGN1SVVYvIJqEZqu5fbeFRnjE1cpEdNkJknUIVpg39JfWLkYG5H:I97Z79mXEol5fKzjE+pEdaJQFExf5H

    Score
    7/10
    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    • Checks if the internet connection is available

    • Target

      alipay_msp.apk

    • Size

      354KB

    • MD5

      89c04e1ebcd58eca6dd93211628ed0bc

    • SHA1

      7d1e77ce25a635299704dbd95bd95c697572ea9d

    • SHA256

      ee3c608fff51b313f4e0b3e542bedccb4d4db4c8eb44e63bf4be0d468e9ee117

    • SHA512

      3dccaeff9906401855f3071c91012926d7e9250674ea0bb89606e4862223a8343fc7b9369afe4e50031d261b45437107c018f565da5615c49721c3bf1bf6ed01

    • SSDEEP

      6144:cH8LfOo+BjGVN8TdW4zxgnm1Us3JuOK2vf5C8EcPK+WvyQcQ2fnq7:cHLxBiVN8pWggmlY25CLE8RcQ2fnq7

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Checks if the internet connection is available

MITRE ATT&CK Mobile v15

Tasks