General

  • Target

    a374ea484b5b9f62807c93ce9ff0555a_JaffaCakes118

  • Size

    20.5MB

  • Sample

    240613-cckj5stfkj

  • MD5

    a374ea484b5b9f62807c93ce9ff0555a

  • SHA1

    9a109ab4dd9245661109d6c421bb0ddb9a0132a4

  • SHA256

    b2bdecb3d47499dfbc886fc0569c4b6d348cd1f0deb39a0ea74b2dbbaac92be3

  • SHA512

    cfd065333c0d7c7fe78a599bae2a2504b714554a8c1c80405fca4e65011ff44fbdadd71e4b24d54cda1f0a189af159ced87c8577cfb886d81aca8a03a9f6d2ce

  • SSDEEP

    393216:RczbUVqBS+nmI2q1MsJCc5e4vKjI8QkJUTp6XZytyXTp6X744dZCv:RvsmI2q1MsJCseF7QkWTpm6yXTpmZov

Malware Config

Targets

    • Target

      a374ea484b5b9f62807c93ce9ff0555a_JaffaCakes118

    • Size

      20.5MB

    • MD5

      a374ea484b5b9f62807c93ce9ff0555a

    • SHA1

      9a109ab4dd9245661109d6c421bb0ddb9a0132a4

    • SHA256

      b2bdecb3d47499dfbc886fc0569c4b6d348cd1f0deb39a0ea74b2dbbaac92be3

    • SHA512

      cfd065333c0d7c7fe78a599bae2a2504b714554a8c1c80405fca4e65011ff44fbdadd71e4b24d54cda1f0a189af159ced87c8577cfb886d81aca8a03a9f6d2ce

    • SSDEEP

      393216:RczbUVqBS+nmI2q1MsJCc5e4vKjI8QkJUTp6XZytyXTp6X744dZCv:RvsmI2q1MsJCseF7QkWTpm6yXTpmZov

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    • Queries the phone number (MSISDN for GSM devices)

    • Reads the contacts stored on the device.

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks