Overview

overview

7

Static

static

6

a994e4c19a...18.apk

android-9-x86

7

a994e4c19a...18.apk

android-10-x64

7

gdtadv2.apk

android-9-x86

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a994e4c19a2e2451d398fc985a6934f5_JaffaCakes118

  • Size

    31.1MB

  • Sample

    240614-n8qa2stdnl

  • MD5

    a994e4c19a2e2451d398fc985a6934f5

  • SHA1

    6c8a13a0038a4372c444f3957943e12b7708cfdc

  • SHA256

    c0aac1a4c0ecf3ec94535cf835df60787b68cb44427d6cdb0880ab59fe49a630

  • SHA512

    f6bfc10eb3271a95ad56b4d63309f4b6ef89159adb487752884847d48e4bec57b273a02866a7167e5e524e8e85eb0e10110923a6f56f0fecc0bf27afe5b0fb69

  • SSDEEP

    786432:/2XT77JU73CC5l4fmoJE2jageEZ2XYoagl:/mT7VY5sE2C

Score
7/10
androidcollectioncredential_accessdiscoveryevasionexecutionimpactpersistence

Malware Config

Targets

    • Target

      a994e4c19a2e2451d398fc985a6934f5_JaffaCakes118

    • Size

      31.1MB

    • MD5

      a994e4c19a2e2451d398fc985a6934f5

    • SHA1

      6c8a13a0038a4372c444f3957943e12b7708cfdc

    • SHA256

      c0aac1a4c0ecf3ec94535cf835df60787b68cb44427d6cdb0880ab59fe49a630

    • SHA512

      f6bfc10eb3271a95ad56b4d63309f4b6ef89159adb487752884847d48e4bec57b273a02866a7167e5e524e8e85eb0e10110923a6f56f0fecc0bf27afe5b0fb69

    • SSDEEP

      786432:/2XT77JU73CC5l4fmoJE2jageEZ2XYoagl:/mT7VY5sE2C

    Score
    7/10
    collectioncredential_accessdiscoveryevasionexecutionimpactpersistence

    • Checks Android system properties for emulator presence.

      evasion

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

      collectioncredential_accessimpact

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

      discovery

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

      discovery

    • Queries the mobile country code (MCC)

      discovery

    • Queries the unique device ID (IMEI, MEID, IMSI)

      discovery

    • Reads information about phone network operator.

      discovery
    behavioral1behavioral2

    • Target

      gdtadv2.jar

    • Size

      443KB

    • MD5

      232146e2595dbcc4917a3ae7b3663b3c

    • SHA1

      3deedba5289f3eddc87cf35c06ba6c6aa1380275

    • SHA256

      abbda9c3353d88c4de9df8880b962fe7958c610cbf54e3e57568af80cd504711

    • SHA512

      43fc0b3687d54dfaecc0a53ce290c59ba4b35540b0348f28edede81fd8e96888dabe7c008eb0d1d8d4fd23c76ace1ff570dd9175695f25a5aaad055f1dfc0d69

    • SSDEEP

      6144:Nvd0m3MKiQr/B49UXhtjKzGLCrR8A5ZpKkUuf/nVo9v1LIMyXiBqpMoZInOrGPuB:j1F/BkURZdiL7UInV8xIbXolwCO6xu

    Score
    1/10
    behavioral3

MITRE ATT&CK Matrix

Tasks