General

  • Target

    989eea78392a9865efb856125734720f_JaffaCakes118

  • Size

    20.2MB

  • Sample

    240605-twftqscg47

  • MD5

    989eea78392a9865efb856125734720f

  • SHA1

    a2cc5e312a0d36aa1e5aa2298b7ca6856b801ffd

  • SHA256

    d5c174271df4e074f8816d60c9754de470b8f1f13c2439309d76932adeb62892

  • SHA512

    d78d0af05843541c328213403bdeee5039ba2321bfba8beda53bc35496c49681e774004c6989d1fa8b7c56ad29a800ff90c71a921e798cc40525ba85aaf249dc

  • SSDEEP

    393216:f6BL8NSd+seX4y/H/XvYmbzFI46mMfQqXqOtZyhHkuk4KX:fIw4e/4mba47MYXO+hrkV

Malware Config

Targets

    • Target

      989eea78392a9865efb856125734720f_JaffaCakes118

    • Size

      20.2MB

    • MD5

      989eea78392a9865efb856125734720f

    • SHA1

      a2cc5e312a0d36aa1e5aa2298b7ca6856b801ffd

    • SHA256

      d5c174271df4e074f8816d60c9754de470b8f1f13c2439309d76932adeb62892

    • SHA512

      d78d0af05843541c328213403bdeee5039ba2321bfba8beda53bc35496c49681e774004c6989d1fa8b7c56ad29a800ff90c71a921e798cc40525ba85aaf249dc

    • SSDEEP

      393216:f6BL8NSd+seX4y/H/XvYmbzFI46mMfQqXqOtZyhHkuk4KX:fIw4e/4mba47MYXO+hrkV

    • Checks if the Android device is rooted.

    • Checks known Qemu files.

      Checks for known Qemu files that exist on Android virtual device images.

    • Checks known Qemu pipes.

      Checks for known pipes used by the Android emulator to communicate with the host.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Requests cell location

      Uses Android APIs to to get current cell information.

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Queries information about active data network

    • Queries the mobile country code (MCC)

    • Target

      amap_resource1_0_0.png

    • Size

      24KB

    • MD5

      94a2a5f84a3fd6f0fd9134708ae1b81e

    • SHA1

      1e21afaa48ed86cb31aaf7b17c3514315364cc99

    • SHA256

      fc0c21884d4edfa4d93282139a309f204b27271a111a5b158edbc048f730b461

    • SHA512

      24a175d15cb5cf8d23f0d53b004ed5c9a47646129c816fcae1b46aedabd95bb2c6dd2958d39d6f98f36dec3cd55d6af2d9b8f7013ced4b37a30db566e9a44923

    • SSDEEP

      384:SevEWnTSCwukBdJ4dVCHyP7MPi3oqYXgnJk:3vEWnSue4+Sf3opQa

    Score
    1/10

MITRE ATT&CK Mobile v15

Tasks