General
-
Target
948eeab43bea60c4e20bc245f76ef785_JaffaCakes118
-
Size
7.0MB
-
Sample
240604-mw82ysdg7w
-
MD5
948eeab43bea60c4e20bc245f76ef785
-
SHA1
fd675e8cd919e2058d6c3b14aad80941e2fb5e2b
-
SHA256
503b25751fb6f59b2848bebb8739e98f8dd9d6b9b4841ecfe62c1ca771d1c2f0
-
SHA512
73a4c4b4739bce6de97a0fc0a97852ae910adfcfd0f0a56a1c52a04ea34d046005a5d7bc081999a78add792a35299b4a1424068a864d38af848ce35b67f1e40c
-
SSDEEP
196608:AVqjLxqDzak3eFm/KuEOq6vRyRS46f+AVBR:AI0Pak3eFm/KTONgRra+ArR
Behavioral task
behavioral1
Sample
948eeab43bea60c4e20bc245f76ef785_JaffaCakes118.apk
Resource
android-x86-arm-20240603-en
Behavioral task
behavioral2
Sample
948eeab43bea60c4e20bc245f76ef785_JaffaCakes118.apk
Resource
android-x64-20240603-en
Behavioral task
behavioral3
Sample
948eeab43bea60c4e20bc245f76ef785_JaffaCakes118.apk
Resource
android-x64-arm64-20240603-en
Malware Config
Targets
-
-
Target
948eeab43bea60c4e20bc245f76ef785_JaffaCakes118
-
Size
7.0MB
-
MD5
948eeab43bea60c4e20bc245f76ef785
-
SHA1
fd675e8cd919e2058d6c3b14aad80941e2fb5e2b
-
SHA256
503b25751fb6f59b2848bebb8739e98f8dd9d6b9b4841ecfe62c1ca771d1c2f0
-
SHA512
73a4c4b4739bce6de97a0fc0a97852ae910adfcfd0f0a56a1c52a04ea34d046005a5d7bc081999a78add792a35299b4a1424068a864d38af848ce35b67f1e40c
-
SSDEEP
196608:AVqjLxqDzak3eFm/KuEOq6vRyRS46f+AVBR:AI0Pak3eFm/KTONgRra+ArR
-
Checks Android system properties for emulator presence.
-
Queries information about the current nearby Wi-Fi networks
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
-
Registers a broadcast receiver at runtime (usually for listening for system events)
-
Acquires the wake lock
-
Checks if the internet connection is available
-
Reads information about phone network operator.
-
Schedules tasks to execute at a specified time
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
-
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Scheduled Task/Job
1Defense Evasion
Download New Code at Runtime
1Execution Guardrails
1Geofencing
1Virtualization/Sandbox Evasion
2System Checks
2