General

  • Target

    a79d28816e2f1942f31b9d45863d291c_JaffaCakes118

  • Size

    800KB

  • Sample

    240614-b8sd7a1aqf

  • MD5

    a79d28816e2f1942f31b9d45863d291c

  • SHA1

    f477c543dd3e815d9d38d1659987e104a54167cb

  • SHA256

    619b604549bfc804433a9d3e3d109e961aaa4ce6d8377ace19048a611d7cc866

  • SHA512

    bc0e2fa0d5b652ade3a19b685ef97edbacfd05ffc4030ac248eb2e8f78054ef0995530b42dfd023b623cbb1cdf747e7710796d5cfc72f839031cc79dd6ac332a

  • SSDEEP

    24576:8DMYX+i/Yi+e2C0VeUFID0EkuMlYXtFxwm:iM0+y/t2FIrrtV

Malware Config

Targets

    • Target

      a79d28816e2f1942f31b9d45863d291c_JaffaCakes118

    • Size

      800KB

    • MD5

      a79d28816e2f1942f31b9d45863d291c

    • SHA1

      f477c543dd3e815d9d38d1659987e104a54167cb

    • SHA256

      619b604549bfc804433a9d3e3d109e961aaa4ce6d8377ace19048a611d7cc866

    • SHA512

      bc0e2fa0d5b652ade3a19b685ef97edbacfd05ffc4030ac248eb2e8f78054ef0995530b42dfd023b623cbb1cdf747e7710796d5cfc72f839031cc79dd6ac332a

    • SSDEEP

      24576:8DMYX+i/Yi+e2C0VeUFID0EkuMlYXtFxwm:iM0+y/t2FIrrtV

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the mobile country code (MCC)

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks