General
- Target 9766683fe0a3f2441e885a2ca2fd75d7_JaffaCakes118
- Size 20.8MB
- Sample240605-hmbymshe99
- SHA256 c042ab0a7fee4b84b97bfddae1b0fbfec9552d7b4ce28ed7c30289123098f95b
- MD5 9766683fe0a3f2441e885a2ca2fd75d7
- SHA1 35e7aef1165f4d7959e12ab757f68270cb95612c
- SHA512 f60747d154ef55a3c0ceab9f326d47e6a3a0220751f4c12facdf5d8c2dcc2686a4275ff80fd68a84411e2eb8c3c3165432dceeb27549bc8088656e2bdd6ff560
- SSDEEP 393216:hxe1aMOYjP/KJKH97xjGWxpF4q5HbuHcWiu15V46LeXPNX6v1/xN:hxe0MOo/KUbjG0FTa8+TLa6v1f
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
9766683fe0a3f2441e885a2ca2fd75d7_JaffaCakes118.apk
Resource
android-x86-arm-20240603-en
Behavioral task
behavioral2
Sample
9766683fe0a3f2441e885a2ca2fd75d7_JaffaCakes118.apk
Resource
android-x64-20240603-en
Behavioral task
behavioral3
Sample
9766683fe0a3f2441e885a2ca2fd75d7_JaffaCakes118.apk
Resource
android-x64-arm64-20240603-en
Behavioral task
behavioral4
Sample
gdtadv2.apk
Resource
android-x86-arm-20240603-en
Behavioral task
behavioral5
Sample
gdtadv2.apk
Resource
android-x64-20240603-en
Behavioral task
behavioral6
Sample
gdtadv2.apk
Resource
android-x64-arm64-20240603-en
Malware Config
Targets
-
- Target 9766683fe0a3f2441e885a2ca2fd75d7_JaffaCakes118
- Size 20.8MB
- SHA256 c042ab0a7fee4b84b97bfddae1b0fbfec9552d7b4ce28ed7c30289123098f95b
- MD5 9766683fe0a3f2441e885a2ca2fd75d7
- SHA1 35e7aef1165f4d7959e12ab757f68270cb95612c
- SHA512 f60747d154ef55a3c0ceab9f326d47e6a3a0220751f4c12facdf5d8c2dcc2686a4275ff80fd68a84411e2eb8c3c3165432dceeb27549bc8088656e2bdd6ff560
- SSDEEP 393216:hxe1aMOYjP/KJKH97xjGWxpF4q5HbuHcWiu15V46LeXPNX6v1/xN:hxe0MOo/KUbjG0FTa8+TLa6v1f
- MD5 SHA1 SHA512 SSDEEP
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries account information for other applications stored on the device
Application may abuse the framework's APIs to collect account information stored on the device.
-
Queries information about active data network
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the mobile country code (MCC)
-
Queries the unique device ID (IMEI, MEID, IMSI)
-
Reads information about phone network operator.
-
- Target gdtadv2.jar
- Size 80KB
- SHA256 e0fc4fb73617f07a314c460fcad2ae77c58c28e318e1f7d23db4f10812da7220
- MD5 a290cec677377f510f190cd96109db94
- SHA1 d640ca68a9a7cf87da969d75a2a480dd1dbf9eaf
- SHA512 dd1ffabaa2015dbcfdc66899ced7e3264f08ed1667d06f72ac8faecb1b252e303ef85016d0c6cdc879899b18820c0747a25c5e50563e47825c25041ac230c808
- SSDEEP 1536:V6n+3P2P7/ZrPsEXhMi8qV8oYWOOvHm33qxc+e/FI2z8Gr7St8hf9MrpNpzBVpZ:sn+3uPzZPHSiPV8RWrvG33d+IImfrutH
- MD5 SHA1 SHA512 SSDEEP
Score1/10