c0a491e685aa273c188163b05ccba58690584ab1a3a64f9f45a8bf9742182a04

General

Target
b98a4dc443dffca0d316187c295b87ce_JaffaCakes118
Size 3.5MB
Sample240617-xrpgvsvbkn
SHA256 c0a491e685aa273c188163b05ccba58690584ab1a3a64f9f45a8bf9742182a04
MD5 b98a4dc443dffca0d316187c295b87ce
SHA1 e341497f5785e59f0348c86dcb570e13d478647e
SHA512 c68050a5bfa1aa603561c64dfd05825447f0b38397cddf70a4eb8a8ba4a46cb07ff123b04eb270586d79608027520f66ed127060dd6c2e84d433698c5f45a960
SSDEEP 98304:Z5JmQnM/fxngG7fzR1f3F08ULs3egbLy2k8KdA+:7cQMe4fz739es35beoKdA+
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Malware Config

Targets

- Target
  b98a4dc443dffca0d316187c295b87ce_JaffaCakes118
- Size 3.5MB
- SHA256 c0a491e685aa273c188163b05ccba58690584ab1a3a64f9f45a8bf9742182a04
- MD5 b98a4dc443dffca0d316187c295b87ce
- SHA1 e341497f5785e59f0348c86dcb570e13d478647e
- SHA512 c68050a5bfa1aa603561c64dfd05825447f0b38397cddf70a4eb8a8ba4a46cb07ff123b04eb270586d79608027520f66ed127060dd6c2e84d433698c5f45a960
- SSDEEP 98304:Z5JmQnM/fxngG7fzR1f3F08ULs3egbLy2k8KdA+:7cQMe4fz739es35beoKdA+
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

banker discovery evasion impact persistence
- Checks if the Android device is rooted.
  evasion
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries the mobile country code (MCC)
  discovery
- Reads information about phone network operator.
  discovery
behavioral1
- Target
  alipay_msp.apk
- Size 354KB
- SHA256 ee3c608fff51b313f4e0b3e542bedccb4d4db4c8eb44e63bf4be0d468e9ee117
- MD5 89c04e1ebcd58eca6dd93211628ed0bc
- SHA1 7d1e77ce25a635299704dbd95bd95c697572ea9d
- SHA512 3dccaeff9906401855f3071c91012926d7e9250674ea0bb89606e4862223a8343fc7b9369afe4e50031d261b45437107c018f565da5615c49721c3bf1bf6ed01
- SSDEEP 6144:cH8LfOo+BjGVN8TdW4zxgnm1Us3JuOK2vf5C8EcPK+WvyQcQ2fnq7:cHLxBiVN8pWggmlY25CLE8RcQ2fnq7
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

collection discovery evasion
- Requests cell location
  Uses Android APIs to to get current cell location.
  collection discovery evasion
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
behavioral2