948ca5b59a4551aeba690ba3c5790d417f344cef7c42916641c3cfcebadf3ab6

General

Target
915520aa7041097c205140e9f4a7fac1_JaffaCakes118
Size 3.8MB
Sample240603-ls2yssae4y
SHA256 948ca5b59a4551aeba690ba3c5790d417f344cef7c42916641c3cfcebadf3ab6
MD5 915520aa7041097c205140e9f4a7fac1
SHA1 b1bbd7b5d92c35d5a5a475ed577afcbccefe9be4
SHA512 15f636a2c4be201a6e52eb9c84df3387fa1a31093d6b48e56151a16921e239646580bc536bbd58db3ef5e713d5ad8c7d96c504d6f6c8774ce96e2206b3631e4c
SSDEEP 98304:dOqgoVV/FMyoKKkZ5W3RpGYHwOnA2ERyHH4:YqJVhnKkZ5uTQDM4
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Malware Config

Targets

- Target
  915520aa7041097c205140e9f4a7fac1_JaffaCakes118
- Size 3.8MB
- SHA256 948ca5b59a4551aeba690ba3c5790d417f344cef7c42916641c3cfcebadf3ab6
- MD5 915520aa7041097c205140e9f4a7fac1
- SHA1 b1bbd7b5d92c35d5a5a475ed577afcbccefe9be4
- SHA512 15f636a2c4be201a6e52eb9c84df3387fa1a31093d6b48e56151a16921e239646580bc536bbd58db3ef5e713d5ad8c7d96c504d6f6c8774ce96e2206b3631e4c
- SSDEEP 98304:dOqgoVV/FMyoKKkZ5W3RpGYHwOnA2ERyHH4:YqJVhnKkZ5uTQDM4
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

banker discovery evasion impact persistence
- Checks if the Android device is rooted.
  evasion
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries the mobile country code (MCC)
  discovery
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Acquires the wake lock
- Checks if the internet connection is available
  discovery
behavioral1
- Target
  sdk.jar
- Size 127KB
- SHA256 51867af300d957236f2cc616fa505fe20e7eb5e6dd2614c13c68ee2da2ef6028
- MD5 4e193ee40974b27cfbaaae738c670d52
- SHA1 43208c4de7a277ee19653807418cdcc32ab164af
- SHA512 ce46b1938f3f84fe5101c8d922ebdf30f757ac401e608f43047d8472e07092f38da7557aca184652c0d3be033873616381a7d2471072544f6f0f911fa413b24e
- SSDEEP 3072:SjgQZzGBVY0KmSiPTPwljjVFgCIbzmfT0h4jQyv:2gQZSBdK1iPTPwdhFgfmfTY6Qyv
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral2 behavioral3 behavioral4