20297828e1a2ac738eed9e56289eaa6edb5e8baa15bac88fd83926342aaa81f6

General

Target
aceccdf08898c0fbea30d113b944b9e6_JaffaCakes118
Size 4.8MB
Sample240615-feecpayhqb
SHA256 20297828e1a2ac738eed9e56289eaa6edb5e8baa15bac88fd83926342aaa81f6
MD5 aceccdf08898c0fbea30d113b944b9e6
SHA1 4694b4b3376df9d6749e123a071fbd4faa0d8dc5
SHA512 97c4f19c9b9437b9abb91d0188d6c5fef7e2083db9940341bb3364be5fd7079f6b91bb43da03d81f4a7063da752d5862c2f776af43abfd1447d6f9e8ef20fc93
SSDEEP 98304:sv8biteJBrOtc9PyXHP0Oy+CYu02/xTu6kPYYL+h:fb+eJBOtGKC702JTuP+h
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Malware Config

Targets

- Target
  aceccdf08898c0fbea30d113b944b9e6_JaffaCakes118
- Size 4.8MB
- SHA256 20297828e1a2ac738eed9e56289eaa6edb5e8baa15bac88fd83926342aaa81f6
- MD5 aceccdf08898c0fbea30d113b944b9e6
- SHA1 4694b4b3376df9d6749e123a071fbd4faa0d8dc5
- SHA512 97c4f19c9b9437b9abb91d0188d6c5fef7e2083db9940341bb3364be5fd7079f6b91bb43da03d81f4a7063da752d5862c2f776af43abfd1447d6f9e8ef20fc93
- SSDEEP 98304:sv8biteJBrOtc9PyXHP0Oy+CYu02/xTu6kPYYL+h:fb+eJBOtGKC702JTuP+h
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

discovery evasion impact persistence
- Checks if the Android device is rooted.
  evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries the mobile country code (MCC)
  discovery
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
- Reads device software version
  Uses Android APIs to read software version number for the device (IMEI/SV for GSM devices).
  discovery
- Listens for changes in the sensor environment (might be used to detect emulation)
  evasion
behavioral1 behavioral2
- Target
  gdtadv2.jar
- Size 468KB
- SHA256 a884e386bf4ec066c9a82518c354be513182add87107552b1f4cf33dc80bddd4
- MD5 6bfe094580c89ba696ef8772de47a552
- SHA1 210bc4afce84b6e6bb36f97f68f9d3d9d3432643
- SHA512 7ae8c9210957f06eb177fa0472ac1fcf80f0e6b1f308ec1906fe059c38623e404b37c34d9e8702cab66efc7ebfdc5400f1506db89b75a5fd1dd915ec2c2086a5
- SSDEEP 6144:Nz015KiQP/B4tKQ3OTNgdJHqn+9ZMsH5EK9JKp0KMNd4IoCJlv0gxWky9+T2k57:N/Z/B/NgdliEZMs9JhZ4kykTlJ
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3