92d1d4e2e92048e71d630c17d795a378a0d4567e6e4221db86c2cf58c2ebb93d

General

Target
ab5a7c76b65d2c44ce197377630616b0_JaffaCakes118
Size 29.7MB
Sample240614-zfcd9syerr
SHA256 92d1d4e2e92048e71d630c17d795a378a0d4567e6e4221db86c2cf58c2ebb93d
MD5 ab5a7c76b65d2c44ce197377630616b0
SHA1 a849fbe68c8104a0d2788d0d0e9d1701c436aa2c
SHA512 e5eace2e06b940e622f9bd303b571744a796ee59ed1bfc12a39684fbb7644cbf585f82b0de41aae1935bd73edf45b286da5a4336091ab1ec1a9692f07cc25407
SSDEEP 786432:SlWF2wQ3n2MPaJ2pOWlUvXWez2ylEpAVCC0KAYq2AJX:OBn2MiJ2pOWSvXWe6GE3C0KtDE
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Targets

- Target
  ab5a7c76b65d2c44ce197377630616b0_JaffaCakes118
- Size 29.7MB
- SHA256 92d1d4e2e92048e71d630c17d795a378a0d4567e6e4221db86c2cf58c2ebb93d
- MD5 ab5a7c76b65d2c44ce197377630616b0
- SHA1 a849fbe68c8104a0d2788d0d0e9d1701c436aa2c
- SHA512 e5eace2e06b940e622f9bd303b571744a796ee59ed1bfc12a39684fbb7644cbf585f82b0de41aae1935bd73edf45b286da5a4336091ab1ec1a9692f07cc25407
- SSDEEP 786432:SlWF2wQ3n2MPaJ2pOWlUvXWez2ylEpAVCC0KAYq2AJX:OBn2MiJ2pOWSvXWe6GE3C0KtDE
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

banker collection discovery evasion impact persistence
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Requests cell location
  Uses Android APIs to to get current cell location.
  collection discovery evasion
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  evasion persistence
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Listens for changes in the sensor environment (might be used to detect emulation)
  evasion
behavioral1
- Target
  AdServer.apk
- Size 1.1MB
- SHA256 751012d560a3c16a6f377f403ea12b9c6805a279d84c08210f9a5543c5bef42e
- MD5 73c2ac27961b9db4274ca13a178c0fa2
- SHA1 3d1b1a8f6c9bc63fc88068c71e98bbe70797d03e
- SHA512 591bf3bd1316189616aed273c5bdcb49ed1c46fc7bdf6ee1db9ce11b317dbfda5477989cc3ceafaa2e02dc6555afa1ac4ba872ea27d9a8ae9b5a9ac3abadcef8
- SSDEEP 24576:ceJTiQnLEw7efCr8vTbmTttkKilyMtnqjAysPf0+fm4Hfr:D4w7ear830tup4anq9a3m4HD
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral2
- Target
  analytics_core.apk
- Size 159KB
- SHA256 77060ad812f5e6e9e896c39bc548f8295238eaa9941e1986e8e024e7d2114309
- MD5 d2e90bb505f20fc73baf25805b0273aa
- SHA1 240fbbfda194a65761baed6f3546bc4c744a1850
- SHA512 c2ef3f79b6cfb171b0904ff8138238cbf985344d91d6d9ec35472d14233d1b108cc0234259e8286cbb099747cc8d9d2f74c8c7394ab3a6dcfc2cc95e168c8c85
- SSDEEP 3072:/vnDHScqJUCqi8p27PhJkqOjvxSWnNoPuKAaSWk8V4rpCPd7H7sl3eX0emR7KDD:7ScaCioePDaZdnNdFDJCPJoKvmtiD
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3
- Target
  bdxadsdk.jar
- Size 437KB
- SHA256 e3edbfdb36fe9fb4054bd368028b30d67ba6ac98bea4cc5f37a98c79d82605f9
- MD5 c6fd94b7044dd1928604aff71a91ec79
- SHA1 77973b2148d9401ae90877fa75b52a84b8a0513b
- SHA512 a0e6c6def8ee39102add54f4b50f66d92ed5f841b0866bb6ee89ee6da35a56cb7bc11213b5c420ca0d37f440c17639b76805762d77509606ebc9f14e4f9210b8
- SSDEEP 12288:QcyI7hYQcTpfQCVwJpj478EygIKPjo6LNQlBZYPO:Qc9hYQs5V6F9gIKPE8NtPO
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral4 behavioral5 behavioral6
- Target
  gdtadv2.jar
- Size 622KB
- SHA256 7dedfed3255e64dea6cbe43789a32583c9e3a9214d527c8125071be4ad7c1d1d
- MD5 925c89def267b4f087278431a2ea1ba2
- SHA1 f512786fbd277978de2ddbd3855db0aa730e4305
- SHA512 f2b414ad33fa2f176162ec0e4e9fd1fa53233cd40395e616c52a60e5fcfb820be0d464520cb8c568c7090a3fbed4be2eb1d9999b6fa487e3de5851d6aed65dc9
- SSDEEP 12288:WpStF524rz2xSbYm5iXuT/w+GMeoZNsAQvoMn+f+BY8CXGec:WAtbfrzZquT/e1aWAQAM8+
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral7