3442d0064033d639fbda27e67b8275b66f798112ff8ed04ca1a55bcfe83c5dfe

Sharing

Copy URL Twitter E-mail

General

Target
99abeb17ff84cb1510ac4684851864d0_JaffaCakes118
Size 18.9MB
Sample240606-bdqbcaeb53
SHA256 3442d0064033d639fbda27e67b8275b66f798112ff8ed04ca1a55bcfe83c5dfe
MD5 99abeb17ff84cb1510ac4684851864d0
SHA1 4dab2aa308f2b3a714f4b704a0807e83622cbc66
SHA512 444e0d5552e693b1d78e884f183fadd2462a42673acf00921b44990168caa59cf33e41e7ca51e41ddd0660690c52eda5a405dc2e13521976f6aa55ef18dee34d
SSDEEP 393216:ww/tvTLqKT/s5F4Qn81SFCse2Q6cGnJrPvbc+RP2Q23RCgk86Jwq+Z0KxQd:wCbL5QP4tOe2Q9GJ7jD0Q2Bl/qq/Qd
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Malware Config

Targets

- Target
  99abeb17ff84cb1510ac4684851864d0_JaffaCakes118
- Size 18.9MB
- SHA256 3442d0064033d639fbda27e67b8275b66f798112ff8ed04ca1a55bcfe83c5dfe
- MD5 99abeb17ff84cb1510ac4684851864d0
- SHA1 4dab2aa308f2b3a714f4b704a0807e83622cbc66
- SHA512 444e0d5552e693b1d78e884f183fadd2462a42673acf00921b44990168caa59cf33e41e7ca51e41ddd0660690c52eda5a405dc2e13521976f6aa55ef18dee34d
- SSDEEP 393216:ww/tvTLqKT/s5F4Qn81SFCse2Q6cGnJrPvbc+RP2Q23RCgk86Jwq+Z0KxQd:wCbL5QP4tOe2Q9GJ7jD0Q2Bl/qq/Qd
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

collection discovery evasion execution impact persistence
- Checks if the Android device is rooted.
  evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Requests cell location
  Uses Android APIs to to get current cell location.
  collection discovery evasion
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  evasion persistence
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Reads information about phone network operator.
  discovery
- Listens for changes in the sensor environment (might be used to detect emulation)
  evasion
behavioral1 behavioral2
- Target
  cmcc-sso-3.1.4.3.jaar
- Size 86KB
- SHA256 5ce3b6cefd583795f1e769bec2104f3333719a771be10df2bb19377e5c312c51
- MD5 eb3a6c76ff66d8762992af6c4410e711
- SHA1 a6af1627308c7aee67a3483eefe4ebe77d4fd503
- SHA512 5e239d88b2b90ec35090147bbf2954548c805a984969c0fbcaae4bd4ea50de05e21c237487bd30a49e7e1d295148e5ada4651ea79f27f001f759e849806bf835
- SSDEEP 1536:oN1siyx7zAVk4+fxP50OldQBQ8VDY4MHtsH0D9R1q7iftgRzE9kZ0TM9N/yQL:ofbe4iP3dMHaaHEhtgRA9kKo9N/yS
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3 behavioral4 behavioral5
- Target
  traffic.apk
- Size 814KB
- SHA256 282d0666dafffae2fd829e31490eccb663154a8a78a8fdd4fc8ab852932a7594
- MD5 e4291b2cfde5b98246b53170cf2983fc
- SHA1 5d2b358f4e67c40a71cdfb2c9c66f02695e81e7c
- SHA512 44aab7c49cdda9b7129cdad4a97c879da040e3177ed473aa56e3b9ad73fdfe9e118ebb3286babff491172e40df03e893f754e365d9aa48d75e724d669bd4bbd0
- SSDEEP 12288:BoWdozPp8aXgsWWQGtvy5A11lH3SjLEvN+P4Dr918DJolUyDghslwVVxauQTq5Pa:S1z6wgQfnMAvUPIr8do2ygqwhauAaDG
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral6 behavioral7 behavioral8