0dafbf35dbb5ae8d08223ad89ddb4322a1d41683766502a027f7dab1cde9c873

Sharing

Copy URL Twitter E-mail

General

Target
ae60342094d0cb98df617020ef110e8a_JaffaCakes118
Size 6.5MB
Sample240615-pepcbszerc
SHA256 0dafbf35dbb5ae8d08223ad89ddb4322a1d41683766502a027f7dab1cde9c873
MD5 ae60342094d0cb98df617020ef110e8a
SHA1 1478d620ecd9ad82308b0c3be9c631b84cb3e427
SHA512 4eca6a847a21119314876482533e7540f03542fc066ab68c8032e484592c9b6a74bf107d4bfee0227c4700bac7b1079b066e74567b2a49b1c92191210ac6aa77
SSDEEP 196608:zjH81O/oXOx/K6OOv5uHy4oMRsXrpg11hqflXQRI+:PH3x/xOOhuft8WvGp+
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Targets

- Target
  ae60342094d0cb98df617020ef110e8a_JaffaCakes118
- Size 6.5MB
- SHA256 0dafbf35dbb5ae8d08223ad89ddb4322a1d41683766502a027f7dab1cde9c873
- MD5 ae60342094d0cb98df617020ef110e8a
- SHA1 1478d620ecd9ad82308b0c3be9c631b84cb3e427
- SHA512 4eca6a847a21119314876482533e7540f03542fc066ab68c8032e484592c9b6a74bf107d4bfee0227c4700bac7b1079b066e74567b2a49b1c92191210ac6aa77
- SSDEEP 196608:zjH81O/oXOx/K6OOv5uHy4oMRsXrpg11hqflXQRI+:PH3x/xOOhuft8WvGp+
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery evasion execution impact persistence
- Checks Android system properties for emulator presence.
  evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about the current nearby Wi-Fi networks
  Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
  discovery
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  evasion persistence
- Queries information about active data network
  discovery
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
behavioral1 behavioral2
- Target
  dmss_v2.jar
- Size 124KB
- SHA256 c55556cf7dcfc4eca5270275bea5bded95d4cc035aca144cff0975be3b215a6d
- MD5 add7e3d9b25d3bf6ba64bc3803a6e51d
- SHA1 728259690381d534e3c9f2bc6a6b0273816a87e9
- SHA512 8d397dfa7e7a301c9fdc17068fa80844b1e822a8da8c453c9096413d111aa158bf896869f3799c58866c95a7440f5831a7fd69d6fd905d2576c0664983d93343
- SSDEEP 3072:TecbLKKVa0Ljd3X6+bPiSGtkOS75SldHfwJv0LrCYgl6a0d+zhC9Y:hbGNQ3X6++1+0Hfw6LrCYgl6a0dChCS
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3 behavioral4 behavioral5
- Target
  rooter.jar
- Size 225KB
- SHA256 be9842aea4f0214ba97c54ba88456957287399362f8bbbc0075d24527ca8d834
- MD5 27deecc2cebb8316437202060c85b2b3
- SHA1 0187954e7d0a3133ba91ae342097b8083bec60e9
- SHA512 a1e0933f877167b952bda28fe94ea8b3645754f67ca877d46039a63badfa3b5e81b68f8fed204dc503aec565e6f5652bc601efd0767388f4710a5dd4b99ca2b9
- SSDEEP 6144:LZ+Rve8yLqdZSr1jcTY+DMB2NW6Sxj3184rARu8ZvFTquW:N+B/jkjcjA286Sl6BvJ0
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral6 behavioral7 behavioral8