f6df58fa00f9913e97e5a26ed83ec1ce86207aee58e27f437f6140c3e09336e0

General

Target
9a04fa0ff306c68a73fab66a948a9076_JaffaCakes118
Size 4.4MB
Sample240606-fsntaaab62
SHA256 f6df58fa00f9913e97e5a26ed83ec1ce86207aee58e27f437f6140c3e09336e0
MD5 9a04fa0ff306c68a73fab66a948a9076
SHA1 6d2cb1b467e4909541a06cdb72d202db3b9fd447
SHA512 f2152356d2a5f199080ff9928916c9d65a0713abf693b7edde36b2c4e7fe7f9b455e8e11df99792342eb945088ed5e8610c6df7ce4dfdb1b7a8266fa821a2183
SSDEEP 98304:XRIsnW35C8dll/6YqLdsvINMRA4llxk1PYnGiLbrHOIv6xqk:6aWUml/6rLC3RA4rnN8d
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Malware Config

Targets

- Target
  9a04fa0ff306c68a73fab66a948a9076_JaffaCakes118
- Size 4.4MB
- SHA256 f6df58fa00f9913e97e5a26ed83ec1ce86207aee58e27f437f6140c3e09336e0
- MD5 9a04fa0ff306c68a73fab66a948a9076
- SHA1 6d2cb1b467e4909541a06cdb72d202db3b9fd447
- SHA512 f2152356d2a5f199080ff9928916c9d65a0713abf693b7edde36b2c4e7fe7f9b455e8e11df99792342eb945088ed5e8610c6df7ce4dfdb1b7a8266fa821a2183
- SSDEEP 98304:XRIsnW35C8dll/6YqLdsvINMRA4llxk1PYnGiLbrHOIv6xqk:6aWUml/6rLC3RA4rnN8d
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

banker collection discovery evasion impact persistence
- Checks if the Android device is rooted.
  evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Requests cell location
  Uses Android APIs to to get current cell location.
  collection discovery evasion
- Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Reads information about phone network operator.
  discovery
behavioral1
- Target
  flyw_d
- Size 300KB
- SHA256 b0955b1c2aaf2bd9221ce8cc45724a7684ad58f220a690973713412d92367cae
- MD5 6631a7eecea8d59561d306c4628a4e08
- SHA1 863d94db5cb9c2131c4d2d45bdb7833f18e2ad49
- SHA512 c2280ee3b6b50f960c94c820f69e08dbb566c707c85b00014a749ee847a4bbbe41e32c8a7ca8f57b0f2d35ae6f9467f219a3100e90de368e2bfa11a7e778de55
- SSDEEP 6144:VZS3MB1UF2Z5kwsQ1NJKUzCln2bAlxUUybdPf0WAGCiB6sf:+3MvUK5kwZKUzCQUlxTyNsWAc/f
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral2 behavioral3 behavioral4