2d405c4fd7b9d77f59dc0038773fe90b73ab4773ccb682d180b100e35b4e3a1f

General

Target
b464a6eac59d9a30bec0e6df604789cf_JaffaCakes118
Size 17.2MB
Sample240616-tk7s3steqm
SHA256 2d405c4fd7b9d77f59dc0038773fe90b73ab4773ccb682d180b100e35b4e3a1f
MD5 b464a6eac59d9a30bec0e6df604789cf
SHA1 2ac28a987cf0d36563405a6b255c5fe470fc4758
SHA512 2d3aded8f7dd56d051282e52a5f63fb5151cb4cabeff2cb45fcbd1a46a2c15311e733e4752c6d1d75611af3c4e7c2c9eaac80ea415df89fe6c518669b4904ade
SSDEEP 393216:eYIu7EDjhxf/z22ngCHkBObsu1/atDNgeI5QltRRyOSpALuhQQwK:jIFDjDXK2nsOThGKX5QnR1Spz
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Malware Config

Targets

- Target
  b464a6eac59d9a30bec0e6df604789cf_JaffaCakes118
- Size 17.2MB
- SHA256 2d405c4fd7b9d77f59dc0038773fe90b73ab4773ccb682d180b100e35b4e3a1f
- MD5 b464a6eac59d9a30bec0e6df604789cf
- SHA1 2ac28a987cf0d36563405a6b255c5fe470fc4758
- SHA512 2d3aded8f7dd56d051282e52a5f63fb5151cb4cabeff2cb45fcbd1a46a2c15311e733e4752c6d1d75611af3c4e7c2c9eaac80ea415df89fe6c518669b4904ade
- SSDEEP 393216:eYIu7EDjhxf/z22ngCHkBObsu1/atDNgeI5QltRRyOSpALuhQQwK:jIFDjDXK2nsOThGKX5QnR1Spz
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

banker discovery evasion impact persistence
- Checks if the Android device is rooted.
  evasion
- Checks Android system properties for emulator presence.
  evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
- Listens for changes in the sensor environment (might be used to detect emulation)
  evasion
behavioral1
- Target
  runtime-dex.jar
- Size 77KB
- SHA256 afdb414fefe27f57394c194618c7652eae81c261140c9b1896e89cbc9049d0fc
- MD5 72d72421f078c947923c51bc1e814c9f
- SHA1 adf71c8def7082cb3806e658dbd570551e876f05
- SHA512 b970632e5ee89e33e4d756ffd7d6f5ee51d59363dcb9b74d85409e32e8245e8689176c7773804f62f8226533cb76704040746a82b3a30c94c2146088cb02325d
- SSDEEP 1536:RimnNQz+ql0+ajai6byry822oGwScw+X1z2mj8EZXoOSwdMSgifyI5Sof5:zNQzXl/ajaR2ry8lAScw+92mj1oEMS9p
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral2 behavioral3 behavioral4
- Target
  vivounionapk.vua
- Size 5.3MB
- SHA256 a9d25bc305575b722f679670cc37e15a94e84fa224eadc47fa51292064048c0c
- MD5 745f33bfe95948c772dd8f546b997fe2
- SHA1 d1745d2686d422d73f9f59430538814c1f27497c
- SHA512 4eeb93f6f7f578d2a281311a1cfc05a315c019fb625b3747f1f4bdc1ca2090a7594b7b82986f58dd753a89275dda73b98b0783183fb784085bdd5fac044f4309
- SSDEEP 98304:JQnf69L91Pqefs8he9EIOOX03JnJjnU15rhZIjD0e+ilK4YGNZ:JQ2fqiC+HOE3J5UJi+ilH3
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery persistence
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
behavioral5