b30b41d71137a23f0a7c29c7954b781998db9f2b2440b6ba8cca5debc2127a92

General

Target
957ee94b33acf6a8a482574dadf4a5d3_JaffaCakes118
Size 699KB
Sample240604-tsxcbacf21
SHA256 b30b41d71137a23f0a7c29c7954b781998db9f2b2440b6ba8cca5debc2127a92
MD5 957ee94b33acf6a8a482574dadf4a5d3
SHA1 61f82866aaf3144660d5c46ed527206514c8b21f
SHA512 1606b5ecc2441545604827439ed12bd8272c130f971d629871f811f957ae1ccfd1f20bad15cf75486113bc7ca4ccdd7719cf5dc224f4c4658b97f6be579a654f
SSDEEP 12288:GsGhcUBzjcKDtU9Cq2TbD6+iBshVBhJ0BxZyiUH7mycKqDFTIKn1MQWnA+RhffmP:GsG3rt2CVK+iGhVBEB+H7KFTJ+REP
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Malware Config

Targets

- Target
  957ee94b33acf6a8a482574dadf4a5d3_JaffaCakes118
- Size 699KB
- SHA256 b30b41d71137a23f0a7c29c7954b781998db9f2b2440b6ba8cca5debc2127a92
- MD5 957ee94b33acf6a8a482574dadf4a5d3
- SHA1 61f82866aaf3144660d5c46ed527206514c8b21f
- SHA512 1606b5ecc2441545604827439ed12bd8272c130f971d629871f811f957ae1ccfd1f20bad15cf75486113bc7ca4ccdd7719cf5dc224f4c4658b97f6be579a654f
- SSDEEP 12288:GsGhcUBzjcKDtU9Cq2TbD6+iBshVBhJ0BxZyiUH7mycKqDFTIKn1MQWnA+RhffmP:GsG3rt2CVK+iGhVBEB+H7KFTJ+REP
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

banker discovery evasion impact persistence stealth trojan collection credential_access
- Removes its main activity from the application launcher
  stealth trojan evasion
- Checks Android system properties for emulator presence.
  evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Queries the mobile country code (MCC)
  discovery
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
behavioral1 behavioral2 behavioral3
- Target
  Fluent.apk
- Size 414KB
- SHA256 9ef6b169afbf9f140dfba4cad958c6a096ffbcf05a707fc43f5d8e0449f62407
- MD5 3d596b729e275c8822001b56934f3acc
- SHA1 2230deddd141c20ecc3a6c2ead933107802494a9
- SHA512 9287a05b4e9b7ede8b7a1f12cca41339c5fa5b04723a052fe9176b5f40afb4a837d3f01948af3741ea4eb49680ab9c02a325cee5be83556567f758a646741636
- SSDEEP 12288:NsGhcUBzjcKDtU9Cq2TbD6+iBshVBhJ0BxZyiUD:NsG3rt2CVK+iGhVBEB+D
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery persistence collection credential_access impact
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Queries information about active data network
  discovery
- Queries the mobile country code (MCC)
  discovery
behavioral4 behavioral5 behavioral6