d5c174271df4e074f8816d60c9754de470b8f1f13c2439309d76932adeb62892

General

Target
989eea78392a9865efb856125734720f_JaffaCakes118
Size 20.2MB
Sample240605-twftqscg47
SHA256 d5c174271df4e074f8816d60c9754de470b8f1f13c2439309d76932adeb62892
MD5 989eea78392a9865efb856125734720f
SHA1 a2cc5e312a0d36aa1e5aa2298b7ca6856b801ffd
SHA512 d78d0af05843541c328213403bdeee5039ba2321bfba8beda53bc35496c49681e774004c6989d1fa8b7c56ad29a800ff90c71a921e798cc40525ba85aaf249dc
SSDEEP 393216:f6BL8NSd+seX4y/H/XvYmbzFI46mMfQqXqOtZyhHkuk4KX:fIw4e/4mba47MYXO+hrkV
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Malware Config

Targets

- Target
  989eea78392a9865efb856125734720f_JaffaCakes118
- Size 20.2MB
- SHA256 d5c174271df4e074f8816d60c9754de470b8f1f13c2439309d76932adeb62892
- MD5 989eea78392a9865efb856125734720f
- SHA1 a2cc5e312a0d36aa1e5aa2298b7ca6856b801ffd
- SHA512 d78d0af05843541c328213403bdeee5039ba2321bfba8beda53bc35496c49681e774004c6989d1fa8b7c56ad29a800ff90c71a921e798cc40525ba85aaf249dc
- SSDEEP 393216:f6BL8NSd+seX4y/H/XvYmbzFI46mMfQqXqOtZyhHkuk4KX:fIw4e/4mba47MYXO+hrkV
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

banker collection discovery evasion impact persistence
- Checks if the Android device is rooted.
  evasion
- Checks known Qemu files.
  Checks for known Qemu files that exist on Android virtual device images.
  evasion
- Checks known Qemu pipes.
  Checks for known pipes used by the Android emulator to communicate with the host.
  evasion
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Requests cell location
  Uses Android APIs to to get current cell information.
  collection discovery
- Unexpected DNS network traffic destination
  Network traffic to other servers than the configured DNS servers was detected on the DNS port.
- Queries information about active data network
  discovery
- Queries the mobile country code (MCC)
  discovery
behavioral1
- Target
  amap_resource1_0_0.png
- Size 24KB
- SHA256 fc0c21884d4edfa4d93282139a309f204b27271a111a5b158edbc048f730b461
- MD5 94a2a5f84a3fd6f0fd9134708ae1b81e
- SHA1 1e21afaa48ed86cb31aaf7b17c3514315364cc99
- SHA512 24a175d15cb5cf8d23f0d53b004ed5c9a47646129c816fcae1b46aedabd95bb2c6dd2958d39d6f98f36dec3cd55d6af2d9b8f7013ced4b37a30db566e9a44923
- SSDEEP 384:SevEWnTSCwukBdJ4dVCHyP7MPi3oqYXgnJk:3vEWnSue4+Sf3opQa
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral2 behavioral3 behavioral4