Overview

overview

8

Static

static

6

9330d36769...18.apk

android-9-x86

8

gdtadv2.apk

android-9-x86

Sharing

Copy URL Twitter E-mail

General

  • Target

    9330d36769fac8abc6a147d8e350acde_JaffaCakes118

  • Size

    21.7MB

  • Sample

    240604-a7ksaafd2x

  • MD5

    9330d36769fac8abc6a147d8e350acde

  • SHA1

    9be893070d3052d5c51865e0b7cab68b60822132

  • SHA256

    912e6177b9f8cc1b889867660c64b3d0bc807f762aff278081130a741866cd9a

  • SHA512

    fe85f910aa87df8287e1a7e0fa68ab4356b523ab1e177a9818ae8e8d7c1b7efe3b0301dd56d101278e788dc610ba2267dc799312e9e9d463cff668bae65aedf6

  • SSDEEP

    393216:eCBgRXhv61bEDJbgJ01roqzI7gDI0DjjiSM6Cof3wHPYS0/tBT+OIjUcdyIWyVYj:ngRRvUEFb2krdRbh/wHWFHIjPdyIZYv7

Score
8/10
androidcollectiondiscoveryevasionpersistence

Malware Config

Targets

    • Target

      9330d36769fac8abc6a147d8e350acde_JaffaCakes118

    • Size

      21.7MB

    • MD5

      9330d36769fac8abc6a147d8e350acde

    • SHA1

      9be893070d3052d5c51865e0b7cab68b60822132

    • SHA256

      912e6177b9f8cc1b889867660c64b3d0bc807f762aff278081130a741866cd9a

    • SHA512

      fe85f910aa87df8287e1a7e0fa68ab4356b523ab1e177a9818ae8e8d7c1b7efe3b0301dd56d101278e788dc610ba2267dc799312e9e9d463cff668bae65aedf6

    • SSDEEP

      393216:eCBgRXhv61bEDJbgJ01roqzI7gDI0DjjiSM6Cof3wHPYS0/tBT+OIjUcdyIWyVYj:ngRRvUEFb2krdRbh/wHWFHIjPdyIZYv7

    Score
    8/10
    collectiondiscoveryevasionpersistence

    • Requests cell location

      Uses Android APIs to to get current cell location.

      collectiondiscoveryevasion

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

      discovery

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

      discovery

    • Registers a broadcast receiver at runtime (usually for listening for system events)

      persistence

    • Checks if the internet connection is available

      discovery

    • Listens for changes in the sensor environment (might be used to detect emulation)

      evasion
    behavioral1

    • Target

      gdtadv2.jar

    • Size

      468KB

    • MD5

      6bfe094580c89ba696ef8772de47a552

    • SHA1

      210bc4afce84b6e6bb36f97f68f9d3d9d3432643

    • SHA256

      a884e386bf4ec066c9a82518c354be513182add87107552b1f4cf33dc80bddd4

    • SHA512

      7ae8c9210957f06eb177fa0472ac1fcf80f0e6b1f308ec1906fe059c38623e404b37c34d9e8702cab66efc7ebfdc5400f1506db89b75a5fd1dd915ec2c2086a5

    • SSDEEP

      6144:Nz015KiQP/B4tKQ3OTNgdJHqn+9ZMsH5EK9JKp0KMNd4IoCJlv0gxWky9+T2k57:N/Z/B/NgdliEZMs9JhZ4kykTlJ

    Score
    1/10
    behavioral2

MITRE ATT&CK Mobile v15

Tasks