General
-
Target
9ba4ec54eafb7c0878da2150e83c4453_JaffaCakes118
-
Size
2.7MB
-
Sample
240610-xhax4swhrj
-
MD5
9ba4ec54eafb7c0878da2150e83c4453
-
SHA1
5a942a46838ba488f5b21acaaa82f456baa6432c
-
SHA256
439d1891c2d41398a97382b3fdd48e820b0e29a259114f030b6c90821302d2a5
-
SHA512
b541c32e5e0fa99d7505c7170f4cbb5f758273aae177c8f937427952df0c6308b6bb717419cabd42d3d9d9be2740026be95893590653e51d1bfcb8ad66206375
-
SSDEEP
49152:O0pbhU/PiopUnKKvxItlcKpC6gHEyDLs2tlKKdWNrhEfuuUXEgkdqNr4ztNEbZ5y:XbyXHWnP6gHjDLscltd+hEmuUXEFd64b
Malware Config
Targets
-
-
Target
9ba4ec54eafb7c0878da2150e83c4453_JaffaCakes118
-
Size
2.7MB
-
MD5
9ba4ec54eafb7c0878da2150e83c4453
-
SHA1
5a942a46838ba488f5b21acaaa82f456baa6432c
-
SHA256
439d1891c2d41398a97382b3fdd48e820b0e29a259114f030b6c90821302d2a5
-
SHA512
b541c32e5e0fa99d7505c7170f4cbb5f758273aae177c8f937427952df0c6308b6bb717419cabd42d3d9d9be2740026be95893590653e51d1bfcb8ad66206375
-
SSDEEP
49152:O0pbhU/PiopUnKKvxItlcKpC6gHEyDLs2tlKKdWNrhEfuuUXEgkdqNr4ztNEbZ5y:XbyXHWnP6gHjDLscltd+hEmuUXEFd64b
Score8/10-
Checks if the Android device is rooted.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Acquires the wake lock
-
Queries information about active data network
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the mobile country code (MCC)
-
Queries the unique device ID (IMEI, MEID, IMSI)
-
Reads information about phone network operator.
-