General
-
Target
b967c8b2c544ae657ac9cd5aa6785f31_JaffaCakes118
-
Size
263KB
-
Sample
240617-w5vqcsyhmg
-
MD5
b967c8b2c544ae657ac9cd5aa6785f31
-
SHA1
39ddca8260e33bb3296821212f2c70d8c4b913c5
-
SHA256
44347b360066b6e052252751198637af9508ff9af3525172d6f2e7ef1f9f3fd9
-
SHA512
8d1eae5a82c0f53dd641c2bcb103a2d3896b5ef5603de3686cc306fa6944b434cb6de13f88913aaae51c32def28bec12867f9afcf316669825b67f6176dbe7eb
-
SSDEEP
6144:NyPNvivXSCeVvnD2IJOsBFaw4IzEsS/ZXBc2Y4MT5fN/:+i6tQIwsBFa/IvcR9U/
Malware Config
Targets
-
-
Target
b967c8b2c544ae657ac9cd5aa6785f31_JaffaCakes118
-
Size
263KB
-
MD5
b967c8b2c544ae657ac9cd5aa6785f31
-
SHA1
39ddca8260e33bb3296821212f2c70d8c4b913c5
-
SHA256
44347b360066b6e052252751198637af9508ff9af3525172d6f2e7ef1f9f3fd9
-
SHA512
8d1eae5a82c0f53dd641c2bcb103a2d3896b5ef5603de3686cc306fa6944b434cb6de13f88913aaae51c32def28bec12867f9afcf316669825b67f6176dbe7eb
-
SSDEEP
6144:NyPNvivXSCeVvnD2IJOsBFaw4IzEsS/ZXBc2Y4MT5fN/:+i6tQIwsBFa/IvcR9U/
Score8/10-
Removes its main activity from the application launcher
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
-
Queries account information for other applications stored on the device
Application may abuse the framework's APIs to collect account information stored on the device.
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Queries the unique device ID (IMEI, MEID, IMSI)
-
Reads information about phone network operator.
-