51d8b56a44c625e4dbd2b5627249535d5b9cef300f189958c2f9a7116d25f884

General

Target
9170d0546c0cd3241c5b20ce2c765f3e_JaffaCakes118
Size 16.9MB
Sample240603-mf68esce27
SHA256 51d8b56a44c625e4dbd2b5627249535d5b9cef300f189958c2f9a7116d25f884
MD5 9170d0546c0cd3241c5b20ce2c765f3e
SHA1 63785d9239de5999143092eeb042cf2940f0f340
SHA512 302e69f4018e9d0354e56a7d98551c726bed0be0b3c94dd711bc9ab60cb08c8f29d88c4fea5b71037b7804e10bf6f3b80dc84200a47b595fde483cf64f63251e
SSDEEP 393216:iztpnkjJ3an04XbxtQapeOIFbY3+F7NTJZzLlBXd4oXp:s4U0mbx/gY367N9xLlBtHp
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Targets

- Target
  9170d0546c0cd3241c5b20ce2c765f3e_JaffaCakes118
- Size 16.9MB
- SHA256 51d8b56a44c625e4dbd2b5627249535d5b9cef300f189958c2f9a7116d25f884
- MD5 9170d0546c0cd3241c5b20ce2c765f3e
- SHA1 63785d9239de5999143092eeb042cf2940f0f340
- SHA512 302e69f4018e9d0354e56a7d98551c726bed0be0b3c94dd711bc9ab60cb08c8f29d88c4fea5b71037b7804e10bf6f3b80dc84200a47b595fde483cf64f63251e
- SSDEEP 393216:iztpnkjJ3an04XbxtQapeOIFbY3+F7NTJZzLlBXd4oXp:s4U0mbx/gY367N9xLlBtHp
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery evasion persistence
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Checks if the internet connection is available
  discovery
- Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
- Reads information about phone network operator.
  discovery
behavioral1
- Target
  alipay_plugin_20140529msp.apk
- Size 3.6MB
- SHA256 ff2772cd4f8fb2eebd1939761823056e0ea2e5782b6985dce5027a6db7679961
- MD5 23c9a6e9e4d9800e783923e0a9ae4d00
- SHA1 ce6628104ee862539be81f4398d8c96e46d7c3ba
- SHA512 ac5a4047b71c68f194d8171e093598681e2ab6bb730a9fd900eea5413ce64e31da3f1cd2c4f2fe97f86515e5b27168a9fbffe014805107f545acfd947c5cc620
- SSDEEP 49152:kMPr/CPIFZlICKAr3RP6FcZfTcyTICKNz28PYoZrr1OYXugY:97d6UrOy8PJ9Ob9
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery evasion
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Checks if the internet connection is available
  discovery
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
- Reads information about phone network operator.
  discovery
behavioral2 behavioral3 behavioral4
- Target
  mobile_sp.apk
- Size 730KB
- SHA256 a284aa2eea6d3da15906f0ee4bec6fd621f38ff7b1ca7b7f8660c177e220be9c
- MD5 2d962f7fc3859a68c6da1aafd603c029
- SHA1 346cdfe622e1d4b008bc97d680373c4a3b219079
- SHA512 6f082d564b508323b06af31dec16e2d18a5254af2ddebc6a6f32fd6a13e0ca2bf1cf22d1d7a7865a8a7e26bb9ad09e6b9f42187d2f0d0bfa31ed1ff74cca5ca0
- SSDEEP 12288:EKYORRQmmT+C1Rs22CiN0CHY6ZRsFWdgh25LOJd2tD7VxaDF6seHtK:EKYORRQ1T+e9+0Kvz6WdgCn7VxaBcK
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5 behavioral6 behavioral7