General
- Target 9ca9891465de72c6ec507b0129ead939_JaffaCakes118
- Size 19.8MB
- Sample240611-cfxzms1amn
- SHA256 f0b25f718252a264587319747674be751e65594e8340866360b5aded674e91fa
- MD5 9ca9891465de72c6ec507b0129ead939
- SHA1 f7eecd2ce598ec1f15ad2f7e7fe2180692897f8c
- SHA512 9f7ba55c71494113bbc295205bc43afe33d9595dbead63c5ec38bdc44de3f50d0813121c6b04df15ee7afee291d040ff6f1448ea5eb66421695e38810e41607d
- SSDEEP 393216:ff7iQuc+RTQ3oeQiFS8EP22Mo5wwh/+RaqtZwn/pWfqR9ObiibsGH8FH+bmvT1vM:fOh5mQiEe/wh/+RaqDwn/IiRUbiWsGa6
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
9ca9891465de72c6ec507b0129ead939_JaffaCakes118.apk
Resource
android-x86-arm-20240603-en
Behavioral task
behavioral2
Sample
gdtadv2.apk
Resource
android-x86-arm-20240603-en
Malware Config
Targets
-
- Target 9ca9891465de72c6ec507b0129ead939_JaffaCakes118
- Size 19.8MB
- SHA256 f0b25f718252a264587319747674be751e65594e8340866360b5aded674e91fa
- MD5 9ca9891465de72c6ec507b0129ead939
- SHA1 f7eecd2ce598ec1f15ad2f7e7fe2180692897f8c
- SHA512 9f7ba55c71494113bbc295205bc43afe33d9595dbead63c5ec38bdc44de3f50d0813121c6b04df15ee7afee291d040ff6f1448ea5eb66421695e38810e41607d
- SSDEEP 393216:ff7iQuc+RTQ3oeQiFS8EP22Mo5wwh/+RaqtZwn/pWfqR9ObiibsGH8FH+bmvT1vM:fOh5mQiEe/wh/+RaqDwn/IiRUbiWsGa6
- MD5 SHA1 SHA512 SSDEEP
Checks if the Android device is rooted.
Queries account information for other applications stored on the device
Application may abuse the framework's APIs to collect account information stored on the device.
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
Queries information about the current nearby Wi-Fi networks
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
Queries the phone number (MSISDN for GSM devices)
Queries information about active data network
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Queries the mobile country code (MCC)
Queries the unique device ID (IMEI, MEID, IMSI)
Reads information about phone network operator.
Listens for changes in the sensor environment (might be used to detect emulation)
-
- Target gdtadv2.jar
- Size 569KB
- SHA256 e8b14871db9425342937a5fcf9ba63f51ebdfaf91313ffbbff891d95af407176
- MD5 f142a61be48fd1bca3d1466c6470f2de
- SHA1 5927e3b4877019dc700539ab14f27954e94a2257
- SHA512 cca6c8f3bd76e48282504d5acc214285a54499f11ebda93c9250e2ccaa86aeb61a40b0caa6546762c9110b36591b85c000d8839d0d22f38df0c30bdb8929eadf
- SSDEEP 12288:XZ7XPCqIyF+llt1Brvt+iksAChCl4C2F2iU7aCCI65QYVK4WR:X1+llt1tvt+HjCC+ORCI65bK4WR
- MD5 SHA1 SHA512 SSDEEP
Score1/10
MITRE ATT&CK Mobile v15
Defense Evasion
Download New Code at Runtime
1Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
2System Checks
2