2d405c4fd7b9d77f59dc0038773fe90b73ab4773ccb682d180b100e35b4e3a1f

General

Target

b464a6eac59d9a30bec0e6df604789cf_JaffaCakes118
Size

17.2MB
Sample

240616-tk7s3steqm
MD5

b464a6eac59d9a30bec0e6df604789cf
SHA1

2ac28a987cf0d36563405a6b255c5fe470fc4758
SHA256

2d405c4fd7b9d77f59dc0038773fe90b73ab4773ccb682d180b100e35b4e3a1f
SHA512

2d3aded8f7dd56d051282e52a5f63fb5151cb4cabeff2cb45fcbd1a46a2c15311e733e4752c6d1d75611af3c4e7c2c9eaac80ea415df89fe6c518669b4904ade
SSDEEP

393216:eYIu7EDjhxf/z22ngCHkBObsu1/atDNgeI5QltRRyOSpALuhQQwK:jIFDjDXK2nsOThGKX5QnR1Spz

Score

8^/10

Malware Config

Targets

- Target
  
  b464a6eac59d9a30bec0e6df604789cf_JaffaCakes118
- Size
  
  17.2MB
- MD5
  
  b464a6eac59d9a30bec0e6df604789cf
- SHA1
  
  2ac28a987cf0d36563405a6b255c5fe470fc4758
- SHA256
  
  2d405c4fd7b9d77f59dc0038773fe90b73ab4773ccb682d180b100e35b4e3a1f
- SHA512
  
  2d3aded8f7dd56d051282e52a5f63fb5151cb4cabeff2cb45fcbd1a46a2c15311e733e4752c6d1d75611af3c4e7c2c9eaac80ea415df89fe6c518669b4904ade
- SSDEEP
  
  393216:eYIu7EDjhxf/z22ngCHkBObsu1/atDNgeI5QltRRyOSpALuhQQwK:jIFDjDXK2nsOThGKX5QnR1Spz
Score

8^/10

banker discovery evasion impact persistence
- Checks if the Android device is rooted.
  evasion
- Checks Android system properties for emulator presence.
  evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
- Listens for changes in the sensor environment (might be used to detect emulation)
  evasion
behavioral1
- Target
  
  runtime-dex.jar
- Size
  
  77KB
- MD5
  
  72d72421f078c947923c51bc1e814c9f
- SHA1
  
  adf71c8def7082cb3806e658dbd570551e876f05
- SHA256
  
  afdb414fefe27f57394c194618c7652eae81c261140c9b1896e89cbc9049d0fc
- SHA512
  
  b970632e5ee89e33e4d756ffd7d6f5ee51d59363dcb9b74d85409e32e8245e8689176c7773804f62f8226533cb76704040746a82b3a30c94c2146088cb02325d
- SSDEEP
  
  1536:RimnNQz+ql0+ajai6byry822oGwScw+X1z2mj8EZXoOSwdMSgifyI5Sof5:zNQzXl/ajaR2ry8lAScw+92mj1oEMS9p
Score

1^/10
behavioral2 behavioral3 behavioral4
- Target
  
  vivounionapk.vua
- Size
  
  5.3MB
- MD5
  
  745f33bfe95948c772dd8f546b997fe2
- SHA1
  
  d1745d2686d422d73f9f59430538814c1f27497c
- SHA256
  
  a9d25bc305575b722f679670cc37e15a94e84fa224eadc47fa51292064048c0c
- SHA512
  
  4eeb93f6f7f578d2a281311a1cfc05a315c019fb625b3747f1f4bdc1ca2090a7594b7b82986f58dd753a89275dda73b98b0783183fb784085bdd5fac044f4309
- SSDEEP
  
  98304:JQnf69L91Pqefs8he9EIOOX03JnJjnU15rhZIjD0e+ilK4YGNZ:JQ2fqiC+HOE3J5UJi+ilH3
Score

7^/10

discovery persistence
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
behavioral5