General

  • Target

    aac4489fb0cebbd95fca21df4b1bcfa1_JaffaCakes118

  • Size

    4.8MB

  • Sample

    240614-vd881ayfkc

  • MD5

    aac4489fb0cebbd95fca21df4b1bcfa1

  • SHA1

    12093f2489463ac2e5fd5d7b979ca3776b2b5178

  • SHA256

    c35815838054f73a66f1b55b78381ee51b58bda5d23cc521b29fd500252d13bd

  • SHA512

    d97870a8ba693ac35c996ee723d084d1eca44ad0ed8b6e100ed0924cd01dd2328ef13f534a1fc27f86e382df31be1bb3b5ae99183641d64df84287a809849b16

  • SSDEEP

    98304:XbmrrpubIoWyo5LKaQJdD8PFDT6nZoT7h9FZPrGyu7NVlww38:a5u0nyoxKa5KZefZP6yuJVe/

Malware Config

Targets

    • Target

      aac4489fb0cebbd95fca21df4b1bcfa1_JaffaCakes118

    • Size

      4.8MB

    • MD5

      aac4489fb0cebbd95fca21df4b1bcfa1

    • SHA1

      12093f2489463ac2e5fd5d7b979ca3776b2b5178

    • SHA256

      c35815838054f73a66f1b55b78381ee51b58bda5d23cc521b29fd500252d13bd

    • SHA512

      d97870a8ba693ac35c996ee723d084d1eca44ad0ed8b6e100ed0924cd01dd2328ef13f534a1fc27f86e382df31be1bb3b5ae99183641d64df84287a809849b16

    • SSDEEP

      98304:XbmrrpubIoWyo5LKaQJdD8PFDT6nZoT7h9FZPrGyu7NVlww38:a5u0nyoxKa5KZefZP6yuJVe/

    • Checks if the Android device is rooted.

    • Checks known Qemu files.

      Checks for known Qemu files that exist on Android virtual device images.

    • Checks known Qemu pipes.

      Checks for known pipes used by the Android emulator to communicate with the host.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about active data network

    • Queries the mobile country code (MCC)

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks