General

  • Target

    b97b623ba5ce56ba1e5e0d38f9996f6e_JaffaCakes118

  • Size

    15.8MB

  • Sample

    240617-xgxqgstglm

  • MD5

    b97b623ba5ce56ba1e5e0d38f9996f6e

  • SHA1

    c8a37bb7bf8c3265adb6e8b4624f3411ecdc7421

  • SHA256

    5e32072ba20fdbdd3c9b1c55aacd86d5987d88a35c60f24a1b30be54a80e06f8

  • SHA512

    1b3449e09699197ad688ab0109e5f6e1f79a217c0b5157800b7506dc834d0b035223b3e8e0d215b0fa52aa22fbfee25153f23318fec3e2cf236963c9d63482f6

  • SSDEEP

    196608:5+K9gOOq2C8HNRWexfxDAKr3Hc+rJ642byOHctEr8r6e0+aOt6mX+QSqwKXNGcGQ:pVOQ8tRXDAmrrgnpHctu+oqNhZGXRg

Malware Config

Targets

    • Target

      b97b623ba5ce56ba1e5e0d38f9996f6e_JaffaCakes118

    • Size

      15.8MB

    • MD5

      b97b623ba5ce56ba1e5e0d38f9996f6e

    • SHA1

      c8a37bb7bf8c3265adb6e8b4624f3411ecdc7421

    • SHA256

      5e32072ba20fdbdd3c9b1c55aacd86d5987d88a35c60f24a1b30be54a80e06f8

    • SHA512

      1b3449e09699197ad688ab0109e5f6e1f79a217c0b5157800b7506dc834d0b035223b3e8e0d215b0fa52aa22fbfee25153f23318fec3e2cf236963c9d63482f6

    • SSDEEP

      196608:5+K9gOOq2C8HNRWexfxDAKr3Hc+rJ642byOHctEr8r6e0+aOt6mX+QSqwKXNGcGQ:pVOQ8tRXDAmrrgnpHctu+oqNhZGXRg

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the mobile country code (MCC)

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks