General

  • Target

    9e2a7184086596df8044648ae528d1f9_JaffaCakes118

  • Size

    22.5MB

  • Sample

    240611-pkcwgswgkg

  • MD5

    9e2a7184086596df8044648ae528d1f9

  • SHA1

    9f96b4b4baf26fbf008174aef50fd831e6eba5fc

  • SHA256

    c58708ec2281077cab0020717a17d83c834544eac3652c7212d9ecd73d616e92

  • SHA512

    16cb697c889e05f2b3c395d18d5772aa6840e5f6a22ad64720041725dd7f5407b1e019bd902286a80cab1b12d2b42a8c33c5f02a94d3d30dfd4ec5f913aa12b0

  • SSDEEP

    393216:vQXmZVfO1+cVvpPPbUsMjSUylbz5Zmicp+r2tF9YM3c7gf/dgMRGk:vWmZpi+kFQjkp3mpF95sc2MAk

Malware Config

Targets

    • Target

      9e2a7184086596df8044648ae528d1f9_JaffaCakes118

    • Size

      22.5MB

    • MD5

      9e2a7184086596df8044648ae528d1f9

    • SHA1

      9f96b4b4baf26fbf008174aef50fd831e6eba5fc

    • SHA256

      c58708ec2281077cab0020717a17d83c834544eac3652c7212d9ecd73d616e92

    • SHA512

      16cb697c889e05f2b3c395d18d5772aa6840e5f6a22ad64720041725dd7f5407b1e019bd902286a80cab1b12d2b42a8c33c5f02a94d3d30dfd4ec5f913aa12b0

    • SSDEEP

      393216:vQXmZVfO1+cVvpPPbUsMjSUylbz5Zmicp+r2tF9YM3c7gf/dgMRGk:vWmZpi+kFQjkp3mpF95sc2MAk

    • Checks if the Android device is rooted.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

    • Listens for changes in the sensor environment (might be used to detect emulation)

MITRE ATT&CK Mobile v15

Tasks