General

  • Target
    b36c4ce8a073707f15d779bf6f31f453_JaffaCakes118
  • Size 30.3MB
  • Sample240616-paebkaseph
  • SHA256 0570c8982abd661102fa4d2c8b286d534031a804a1de31e0c8e0b4205f7ba85f
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      b36c4ce8a073707f15d779bf6f31f453_JaffaCakes118
    • Size 30.3MB
    • SHA256 0570c8982abd661102fa4d2c8b286d534031a804a1de31e0c8e0b4205f7ba85f
    • MD5 SHA1 SHA512 SSDEEP
    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    • Queries the phone number (MSISDN for GSM devices)

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Acquires the wake lock

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the mobile country code (MCC)

    • Reads information about phone network operator.

    • Target
      baseSdk.jar
    • Size 35KB
    • SHA256 c7791c1f07ed6241c69f29f8fa73a0632f809a1fad2d5d0f813f4786500e6318
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10

MITRE ATT&CK Mobile v15

Tasks