Overview

overview

8

Static

static

6

a3ed7b5da5...18.apk

android-9-x86

8

gdtadv2.apk

android-9-x86

gdtadv2.apk

android-10-x64

gdtadv2.apk

android-11-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a3ed7b5da541b74710a6a139e13f3efa_JaffaCakes118

  • Size

    19.9MB

  • Sample

    240613-ft1jgavgle

  • MD5

    a3ed7b5da541b74710a6a139e13f3efa

  • SHA1

    d59f85ffcda5b20e54757a558410021e6faaaca6

  • SHA256

    3ebd5f70464f4197849d08cd455d90a6619de06dcae2b5247515668737646636

  • SHA512

    c1c8603706f9721147a95990382c76c7f27eff99fc82fa08ef2ed727a691c5d2f27b577fcd73f85baa830b7a1668163255a0fb137b6c4d728e0df059f9c32345

  • SSDEEP

    393216:cn2Ji6oWLGhuvWsGorIhpDnQTkfZ9LQupVXGIsgL6oACq4Bq7+o8U:OX6oWLdWiunXfZlLLt6dxCo8U

Score
8/10
androiddiscoveryevasionimpactpersistence

Malware Config

Targets

    • Target

      a3ed7b5da541b74710a6a139e13f3efa_JaffaCakes118

    • Size

      19.9MB

    • MD5

      a3ed7b5da541b74710a6a139e13f3efa

    • SHA1

      d59f85ffcda5b20e54757a558410021e6faaaca6

    • SHA256

      3ebd5f70464f4197849d08cd455d90a6619de06dcae2b5247515668737646636

    • SHA512

      c1c8603706f9721147a95990382c76c7f27eff99fc82fa08ef2ed727a691c5d2f27b577fcd73f85baa830b7a1668163255a0fb137b6c4d728e0df059f9c32345

    • SSDEEP

      393216:cn2Ji6oWLGhuvWsGorIhpDnQTkfZ9LQupVXGIsgL6oACq4Bq7+o8U:OX6oWLdWiunXfZlLLt6dxCo8U

    Score
    8/10
    discoveryevasionimpactpersistence

    • Checks if the Android device is rooted.

      evasion

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

      evasion

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

      discovery

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

      discovery

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

      discovery

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

      discovery

    • Reads information about phone network operator.

      discovery
    behavioral1

    • Target

      gdtadv2.jar

    • Size

      241KB

    • MD5

      b95166c2f63e536b6fc4b5b811444dec

    • SHA1

      45fc74323bb2e66f4c2a493b65b70e0de2aeb77c

    • SHA256

      2f92b98f55c7d4417dff3fc2af9245c66aad3ab8be65177954ed7a4f13bae20d

    • SHA512

      65eb813d39270d83e6d43956ec139f04779dbea58e517da1727a0f4fad9de32bb4cd49bed1dc1fec31b95a95b1c653c22b327aa38cba1645330c9d256d94c087

    • SSDEEP

      6144:KRKhU/uUwjTCpnUjgWkiCBliWLvghUhSj4qj80Gq7JqBGK:KoUmUgenUjwBl1jgVjJ57IBl

    Score
    1/10
    behavioral2behavioral3behavioral4

MITRE ATT&CK Matrix

Tasks