Overview

overview

7

Static

static

6

a401503560...18.apk

android-9-x86

7

aybydcaamcvhtgn.apk

android-9-x86

aybydcaamcvhtgn.apk

android-10-x64

aybydcaamcvhtgn.apk

android-11-x64

whdbgnw.apk

android-9-x86

whdbgnw.apk

android-10-x64

whdbgnw.apk

android-11-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a401503560da253e8aa5a3c82d31534e_JaffaCakes118

  • Size

    8.8MB

  • Sample

    240613-f74haazclm

  • MD5

    a401503560da253e8aa5a3c82d31534e

  • SHA1

    7bb9e01ce6685b7b92fc42a3eb2be2fe2d3468e4

  • SHA256

    7eb6d01a00aae661b892b776e8c9fa059e4a4035bb7cc026e71879ec2fc570be

  • SHA512

    54ed092fbf259c4e52d0387f779a03a8519baab831c46d53ef76fbe5d2c4b7c126843ed2de29a79128cd2dbdb8396a0ecd2864330fe507c2a541bb6ecb64b802

  • SSDEEP

    196608:5HaQO9P+IT8Kq926i3x4nvms/qSizrssYHSf/0scXq/vx/bPlHKc:5ch+UY9Xi3x4nvmsmrlf/sXq/vdNKc

Score
7/10
androidbankercollectiondiscoveryevasionimpact

Malware Config

Targets

    • Target

      a401503560da253e8aa5a3c82d31534e_JaffaCakes118

    • Size

      8.8MB

    • MD5

      a401503560da253e8aa5a3c82d31534e

    • SHA1

      7bb9e01ce6685b7b92fc42a3eb2be2fe2d3468e4

    • SHA256

      7eb6d01a00aae661b892b776e8c9fa059e4a4035bb7cc026e71879ec2fc570be

    • SHA512

      54ed092fbf259c4e52d0387f779a03a8519baab831c46d53ef76fbe5d2c4b7c126843ed2de29a79128cd2dbdb8396a0ecd2864330fe507c2a541bb6ecb64b802

    • SSDEEP

      196608:5HaQO9P+IT8Kq926i3x4nvms/qSizrssYHSf/0scXq/vx/bPlHKc:5ch+UY9Xi3x4nvmsmrlf/sXq/vdNKc

    Score
    7/10
    bankercollectiondiscoveryevasionimpact

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

      evasion

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      bankerdiscovery

    • Requests cell location

      Uses Android APIs to to get current cell location.

      collectiondiscoveryevasion

    • Queries information about active data network

      discovery

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

      discovery

    • Reads information about phone network operator.

      discovery
    behavioral1

    • Target

      aybydcaamcvhtgn.dat

    • Size

      83KB

    • MD5

      b2dbaa59700e847f1f09e9ee3e697280

    • SHA1

      65d35a8889e162e0d93249501d6ece0bdeab75bd

    • SHA256

      28d30aa230a74582b2f9ff3d28dd93a6560cec5e98c28977a7a272668009e963

    • SHA512

      cd98522a884af5568427be4600dfa90dbba2519b030bce93ae3413133ac97df5c9779055a50f753be79956390d9404b32f4eaabd74e0f9728fd44f67f985e472

    • SSDEEP

      1536:+ZVy9RZ6sJIvx5kP4rBcm8KCkFtTf77KfI0ljRd3V6FbHu/kpilWb/X7HKjLJHid:+TyfZtivzkPSc7k3fyFjR5SO/AilWTe0

    Score
    1/10
    behavioral2behavioral3behavioral4

    • Target

      whdbgnw.dat

    • Size

      88KB

    • MD5

      f03109f7d3b909d09d88619e1dba62b8

    • SHA1

      82369183044ee28ada441be5b706cb5fb776f11f

    • SHA256

      7e63c4fb649e966eb8ed50ef223855c361dc15a14e0298bd541f25523932ad51

    • SHA512

      dcf80a5b89c5c65968c75cf51c44d32155b272bc45a0eee371a3554fcd5084b068150211e334da388e8f5827ff60c79706e54ff1d640eb82cc1b11081109b965

    • SSDEEP

      1536:m2bcgt53OE00VjLvXEtd7jsxq0oFZJFq0VDTJyWonAaSDa7rCiVuJWrieJu4:ZiENFEbjsNoDTMCaSlouYOeJN

    Score
    1/10
    behavioral5behavioral6behavioral7

MITRE ATT&CK Matrix

Tasks