Overview

overview

7

Static

static

6

9bc1902431...18.apk

android-9-x86

7

9bc1902431...18.apk

android-11-x64

7

abc_weixin_plug.apk

android-9-x86

1

abc_weixin_plug.apk

android-10-x64

1

abc_weixin_plug.apk

android-11-x64

1

addon.apk

android-9-x86

1

addon.apk

android-10-x64

1

addon.apk

android-11-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9bc19024312d8d35669d9d882597350f_JaffaCakes118

  • Size

    12.0MB

  • Sample

    240610-yqscssyern

  • MD5

    9bc19024312d8d35669d9d882597350f

  • SHA1

    fd326643e71cfdf88af9272d5b3dc2d32dad52fa

  • SHA256

    77bb0a47f08892e96d6497c8b08844f7322078b18b47c5f5b44ee84a69b855b8

  • SHA512

    1e5270d45ede13472839623daddd1a00fee796a300c4ae52c22826d7ac384f9c0232902259f7dbcb25be129d05dd0c495d69f7b5b74b12f172537ed881226da0

  • SSDEEP

    196608:NUDRPxOXm4g23DjF7fbFwvfFF7fbFwvfJiq4o/UFbm7rO/6Ua/87UvBL16BHiR:2lxO24nTjx2XFx2Xr4UUirWX+uUvBL1r

Score
7/10
androidcollectioncredential_accessdiscoveryevasionimpactpersistence

Malware Config

Targets

    • Target

      9bc19024312d8d35669d9d882597350f_JaffaCakes118

    • Size

      12.0MB

    • MD5

      9bc19024312d8d35669d9d882597350f

    • SHA1

      fd326643e71cfdf88af9272d5b3dc2d32dad52fa

    • SHA256

      77bb0a47f08892e96d6497c8b08844f7322078b18b47c5f5b44ee84a69b855b8

    • SHA512

      1e5270d45ede13472839623daddd1a00fee796a300c4ae52c22826d7ac384f9c0232902259f7dbcb25be129d05dd0c495d69f7b5b74b12f172537ed881226da0

    • SSDEEP

      196608:NUDRPxOXm4g23DjF7fbFwvfFF7fbFwvfJiq4o/UFbm7rO/6Ua/87UvBL16BHiR:2lxO24nTjx2XFx2Xr4UUirWX+uUvBL1r

    Score
    7/10
    discoveryevasionpersistencecollectioncredential_accessimpact

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

      collectioncredential_accessimpact

    • Queries account information for other applications stored on the device

      Application may abuse the framework's APIs to collect account information stored on the device.

      collection

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

      discovery

    • Queries the phone number (MSISDN for GSM devices)

      discovery

    • Queries information about active data network

      discovery

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

      discovery

    • Queries the mobile country code (MCC)

      discovery

    • Reads information about phone network operator.

      discovery

    • Listens for changes in the sensor environment (might be used to detect emulation)

      evasion
    behavioral1behavioral2

    • Target

      abc_weixin_plug.apk

    • Size

      416KB

    • MD5

      887e08070d6a69d1f332d90f8b767bec

    • SHA1

      afd9100634dffcbfe6ebc663fa11a26200ff6275

    • SHA256

      08d88a20cba46c4899d0bd00c6d9ea8d78304a00700725d25561175ac1b898b3

    • SHA512

      0615ab67b13a5491e06d3754a766161ecbaa1851448de5c91f8d329b3bcc6379faea34d4c258527acfbe67955d3f7dfa01246c0efe50a9c5e417aae92726ef15

    • SSDEEP

      6144:XZ3wndypZNMRHrHO6SmPJ697BE2MyXB0AFTiip9ZRKIngPxKZMbKt3w/C/t:X6dypcNO6XEpB5M+XqIgP7bKt3lV

    Score
    1/10
    behavioral3behavioral4behavioral5

    • Target

      addon.zip

    • Size

      3.6MB

    • MD5

      b2ce70664d0b7a0509fcf769a81bb8ad

    • SHA1

      0998edfea4be074a64b5de8912d4dd67733b8424

    • SHA256

      35849cb4af07ba87a6dab20b5973ebf6668f2692a3cb49db9a5ab6312f929303

    • SHA512

      51c566c1bd96a1d5bccda676bc72e11d8f0bd1452dfc71a25b2274d214eafc23f49198e609c3e247a088153e87a7dbca308759fa0df4355d0bea8baca25878f8

    • SSDEEP

      98304:UNk1hD1QPFSlrOXn988Oj00u6HxcBAGDn:tPxOXm4g23Dn

    Score
    1/10
    behavioral6behavioral7behavioral8

MITRE ATT&CK Matrix

Tasks