General

  • Target

    920dee95fd5c7abfc8b02238c319978d_JaffaCakes118

  • Size

    3.8MB

  • Sample

    240603-rdmhfsac56

  • MD5

    920dee95fd5c7abfc8b02238c319978d

  • SHA1

    8cd9cedef3ae030784246d444dc69a3cf09bfe56

  • SHA256

    dd3e5ebe3b02288621fc007fd8fc9bb69217b560d9f5fb7e1ccfe32344401e4a

  • SHA512

    b5e9b0ba3fc574497c20071d0160221bd8aef0a2c916af0e5b00472de6e7ef755a9629efcbd254b7c9d82d7e1ad8d0300f46681871bafda00d793f9d2e62d018

  • SSDEEP

    98304:up/i14ktIKMkDqTjtN3e3fX+chy59WmNCqFPhscN:uhi14ktIKR2THOPuoI0mEq3scN

Malware Config

Targets

    • Target

      920dee95fd5c7abfc8b02238c319978d_JaffaCakes118

    • Size

      3.8MB

    • MD5

      920dee95fd5c7abfc8b02238c319978d

    • SHA1

      8cd9cedef3ae030784246d444dc69a3cf09bfe56

    • SHA256

      dd3e5ebe3b02288621fc007fd8fc9bb69217b560d9f5fb7e1ccfe32344401e4a

    • SHA512

      b5e9b0ba3fc574497c20071d0160221bd8aef0a2c916af0e5b00472de6e7ef755a9629efcbd254b7c9d82d7e1ad8d0300f46681871bafda00d793f9d2e62d018

    • SSDEEP

      98304:up/i14ktIKMkDqTjtN3e3fX+chy59WmNCqFPhscN:uhi14ktIKR2THOPuoI0mEq3scN

    • Checks if the Android device is rooted.

    • Checks known Qemu files.

      Checks for known Qemu files that exist on Android virtual device images.

    • Checks known Qemu pipes.

      Checks for known pipes used by the Android emulator to communicate with the host.

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks if the internet connection is available

MITRE ATT&CK Mobile v15

Tasks