823c292932584826ac0cb7e01c90c9fa498a1dae385e948f9d6e39f8deb6e0d3

Sharing

Copy URL Twitter E-mail

General

Target
90b6eee861f365f727a35bcd787a6e10_JaffaCakes118
Size 5.0MB
Sample240603-gdspcsef73
SHA256 823c292932584826ac0cb7e01c90c9fa498a1dae385e948f9d6e39f8deb6e0d3
MD5 90b6eee861f365f727a35bcd787a6e10
SHA1 47b1bd0e7e84fa5c7ac83754cfa784aa3b35e069
SHA512 accedab0fe4b4f76b5a5b81b3c92501099816449415fbf6babf34e953bd66685490f32af4207b642168e21baa1ae6b00ce49bb2d7b96cdee2fcc45811ac1c307
SSDEEP 98304:7atIV6/7zI5qTJMk/3qaNbV24NasBdgyAN+pM0su9wtL40KpX:kIgT3JMkSIl1ogW0d9wtMH
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Targets

- Target
  90b6eee861f365f727a35bcd787a6e10_JaffaCakes118
- Size 5.0MB
- SHA256 823c292932584826ac0cb7e01c90c9fa498a1dae385e948f9d6e39f8deb6e0d3
- MD5 90b6eee861f365f727a35bcd787a6e10
- SHA1 47b1bd0e7e84fa5c7ac83754cfa784aa3b35e069
- SHA512 accedab0fe4b4f76b5a5b81b3c92501099816449415fbf6babf34e953bd66685490f32af4207b642168e21baa1ae6b00ce49bb2d7b96cdee2fcc45811ac1c307
- SSDEEP 98304:7atIV6/7zI5qTJMk/3qaNbV24NasBdgyAN+pM0su9wtL40KpX:kIgT3JMkSIl1ogW0d9wtMH
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery evasion impact persistence
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  evasion persistence
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Checks if the internet connection is available
  discovery
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
behavioral1
- Target
  bdxadsdk.jar
- Size 85KB
- SHA256 68bc2ffef6fa34c7e82d4a52a5f7f173cc2206d4b2f22b6b8a6e23d06dd82755
- MD5 8a7616b8aa949a9c4f56646343fafccd
- SHA1 e0653e2cada88ea552f04157916b2d458ea70ab0
- SHA512 159dfcaa317157864ba66e74161a7b7a35fc598544009222a7fd5e1ba9e5cbb4ac62c35491201f692b79c13b033a0a3e83577dc1468f28feeced569f306e47f1
- SSDEEP 1536:gTGsje/aPIZJnkah4IFGMd8pAImy3G/ckDaAhUrabvW9LRIpSZ:gTGsi/awYqCqIy/csmrab+9LRIEZ
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral2 behavioral3 behavioral4
- Target
  gdtadv2.jar
- Size 156KB
- SHA256 5e3bb41cbf9d15169ef46cb28d4d5a997113f85a8e72796da0b8ff9ea91c31a6
- MD5 3c83478a39f845214716b1bc4a9b118c
- SHA1 5fa504a0de8ee7c0f8842e3f46b28a6e62667265
- SHA512 d8c8750f4ed19f1bad1632e56c421a079b3a595455a449fae332c0cd83b3877ecab2e2966323cc8e3257869aee53194a5ab6a68dee80df4c52818b246bb2bc6e
- SSDEEP 3072:TLf/+koppePuZBL21AziOIuStWcspzAgEtCy2Xd22MKv:nXNEAu3iuzPbStp6oCVXd22n
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5 behavioral6 behavioral7
- Target
  yap.cfg
- Size 154KB
- SHA256 2f8fc64e532bc7a67002eba09b043e1f3d0842bf22ef457f4173f0f751815992
- MD5 ac543581b8bc896e8af1ad5d84e7a0f2
- SHA1 d5e01147a5376683bd02c2773198d89e3d8860a8
- SHA512 0e89d455145dc8da0b6f98d60ad27650cb974eeb23c655e101793beb0bd5c96839aec266e006826593ae57e70d6a822672270b56c01415614647cc0a3f58707c
- SSDEEP 3072:unKR+3gJDw3mPgNJaTvCf6gk4RHi+J7X7/OOBwBs9SWL0rMEnPnbi1bx:dm2P+JaTvCf60Hi+Jr7GOa0wPnbi3
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral10 behavioral8 behavioral9