Overview

overview

7

Static

static

6

b17b27bcba...18.apk

android-9-x86

7

BDTX140.apk

android-9-x86

BDTX140.apk

android-10-x64

BDTX140.apk

android-11-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b17b27bcba9d3aee7fb7bc51fb1a57ee_JaffaCakes118

  • Size

    1.7MB

  • Sample

    240616-dmlqmaxclb

  • MD5

    b17b27bcba9d3aee7fb7bc51fb1a57ee

  • SHA1

    2c979ad9c10b183126a3beb5af38df9cd4b64e57

  • SHA256

    f0fa2766b8d5063ba60d44739bf5aeadbad532236133d95552fe08dd05ac1229

  • SHA512

    ebc36abae07f08f73826b4dd933260f9d18df2424312047f800fc31b493d80db5270b0f08f004508fa04ed49c42d7b38752df601238ca8d2f502b9a5e2025c28

  • SSDEEP

    24576:Z4AEfaacDj9Q4TqGEC2bRTNYrERkQlJkKxvaSzxMhGpUgWN1QnP8I2GN:O4DJbTq62deWk2kKnahXgWN+nkUN

Score
7/10
androidbankercollectiondiscoveryevasionimpactpersistence

Malware Config

Targets

    • Target

      b17b27bcba9d3aee7fb7bc51fb1a57ee_JaffaCakes118

    • Size

      1.7MB

    • MD5

      b17b27bcba9d3aee7fb7bc51fb1a57ee

    • SHA1

      2c979ad9c10b183126a3beb5af38df9cd4b64e57

    • SHA256

      f0fa2766b8d5063ba60d44739bf5aeadbad532236133d95552fe08dd05ac1229

    • SHA512

      ebc36abae07f08f73826b4dd933260f9d18df2424312047f800fc31b493d80db5270b0f08f004508fa04ed49c42d7b38752df601238ca8d2f502b9a5e2025c28

    • SSDEEP

      24576:Z4AEfaacDj9Q4TqGEC2bRTNYrERkQlJkKxvaSzxMhGpUgWN1QnP8I2GN:O4DJbTq62deWk2kKnahXgWN+nkUN

    Score
    7/10
    bankercollectiondiscoveryevasionimpactpersistence

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

      evasion

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      bankerdiscovery

    • Queries the phone number (MSISDN for GSM devices)

      discovery

    • Reads the content of SMS inbox messages.

      collection

    • Reads the content of the SMS messages.

      collection

    • Requests cell location

      Uses Android APIs to to get current cell location.

      collectiondiscoveryevasion

    • Queries information about active data network

      discovery

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

      discovery

    • Requests dangerous framework permissions

    behavioral1

    • Target

      BDTX140

    • Size

      99KB

    • MD5

      3d216f8fddb9705a6720a285475837f1

    • SHA1

      f053d23b284bfe2faf6e76d353ff052471e2de2c

    • SHA256

      de7bf40574754a5144fa5cf3bc5e97f7adc7f5abebb18c41e8f0631917db4c0c

    • SHA512

      38be39da8f96abc87109cfd57b2d63ddfa72971f023024a5b4ce1f97cd905a96a94e19eea19ae9b745f28d02c6689a4473627ce57ec85dce2018a77e699620cb

    • SSDEEP

      3072:O/hr91fY/9tdWXLqQRClwYJ4sAAq4/IZn8NxQNRmDJS:2B9NMDGLqofsAAbNI8g

    Score
    1/10
    behavioral2behavioral3behavioral4

MITRE ATT&CK Mobile v15

Tasks