7b3312aa3c9a6b670a2e1223e7d81b01e327beb401dcc82846eb73b353e3ce8d

Sharing

Copy URL Twitter E-mail

General

Target
a37f1ac6c332d79c5f816db36459a344_JaffaCakes118
Size 6.8MB
Sample240613-ck17vs1bja
SHA256 7b3312aa3c9a6b670a2e1223e7d81b01e327beb401dcc82846eb73b353e3ce8d
MD5 a37f1ac6c332d79c5f816db36459a344
SHA1 fd8b7d3a0e36cb67358551970de3284a175b1e50
SHA512 3001d3227834552cf133fc07f8c96db63b88149eb461586370dbfa0bbcc31144e37fee40994be7d8d78fcd4b891fbee06ee0fc8b072327e76224103c0d4365a5
SSDEEP 98304:Gr761NF7mPgOA0bzmrxQuB7MmNnt1d/AYs/I09XfbCFXruTcECHD+/OxN566D6bc:GrsOtM2uxMGwJCFFZ+/jqguPB
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Malware Config

Targets

- Target
  a37f1ac6c332d79c5f816db36459a344_JaffaCakes118
- Size 6.8MB
- SHA256 7b3312aa3c9a6b670a2e1223e7d81b01e327beb401dcc82846eb73b353e3ce8d
- MD5 a37f1ac6c332d79c5f816db36459a344
- SHA1 fd8b7d3a0e36cb67358551970de3284a175b1e50
- SHA512 3001d3227834552cf133fc07f8c96db63b88149eb461586370dbfa0bbcc31144e37fee40994be7d8d78fcd4b891fbee06ee0fc8b072327e76224103c0d4365a5
- SSDEEP 98304:Gr761NF7mPgOA0bzmrxQuB7MmNnt1d/AYs/I09XfbCFXruTcECHD+/OxN566D6bc:GrsOtM2uxMGwJCFFZ+/jqguPB
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

banker collection discovery evasion execution impact persistence
- Checks if the Android device is rooted.
  evasion
- Checks known Qemu files.
  Checks for known Qemu files that exist on Android virtual device images.
  evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about the current nearby Wi-Fi networks
  Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
  discovery
- Requests cell location
  Uses Android APIs to to get current cell location.
  collection discovery evasion
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  evasion persistence
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Reads information about phone network operator.
  discovery
behavioral1 behavioral2
- Target
  dmss_v2.jar
- Size 126KB
- SHA256 a9d07897e42c42c15f27ac1e3a907072bce90aeed7cf70ad3c52ea020a2bb1ac
- MD5 aa64c54de3204df266353f78f8f92743
- SHA1 f30391c3c576f3ad05cae309d4b3ed63759f140f
- SHA512 a3be909d084d88dc1da4c0b0fd8dfbcc63d3149308f622b094fb1b9b4a47c2e5fe9633fd7354e2ce281d222fffcfdfd3896708cb398c81f12437aa8f0720690c
- SSDEEP 3072:QWDEMmwiLvzgsHGEIqTriwmelZLoALvFchukchKC+8G/ee:pDpmwiJ2Ur7mhAL+kkcPG1
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3 behavioral4 behavioral5
- Target
  dump.jar
- Size 67KB
- SHA256 a4746ce98e7bf8ae964dbfac4df074234eae99a95f7757666861914f23544415
- MD5 1ed63aae654ec48412cc6c368401f747
- SHA1 9b8369c379d79f4a140787461da3d99945db9251
- SHA512 e59f80e94f7bdcad55c450eea30fdb6f5b16e8256b697f745236aa5f4a29d173d6c0569adac770fe9f7e47d7fbf48decd196d4927940190ce17b080dc39a06a8
- SSDEEP 1536:Uux2jGD/j3xsYOCnjGS6VXAuVu1UB2h1/eMo6Xy4qxHkIKiu:Xx2jy31eVXAuVumCpesy4qdtu
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral6 behavioral7 behavioral8
- Target
  dynamic.jar
- Size 77KB
- SHA256 7d7ada76ea057847b5c47ed0f16a6d0e52cdbebbbdb08c1a9519acf70a1a4107
- MD5 c14c8a2f5d3a7c47eb2ca8c1b6e69adb
- SHA1 4e57b3c0f34427aba8a5be40c2e9b627172a89c8
- SHA512 2be420b849c0fa84d3c594ab6bc85255eb54915e05aac5fd3d711e8dc93f484c5a2add2c662a858d4c2ce316a716c9e930122e9cb1047be7482c495242d766e4
- SSDEEP 1536:fLAphepUaQbf6B7Xpy0lL8laR5pSbz1yBjwUP6SrL4z:cuXYm7XpywIoSb8scFL4z
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral10 behavioral11 behavioral9