General

  • Target
    bc38728dcc6afc342019a6fce082f60d_JaffaCakes118
  • Size 39KB
  • Sample240618-qxe22swblb
  • SHA256 7cbb9fb85d64542cdfcd9c4df0ea7e0ea1e94ec28fea0db035f5c5933c8f6c36
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      bc38728dcc6afc342019a6fce082f60d_JaffaCakes118
    • Size 39KB
    • SHA256 7cbb9fb85d64542cdfcd9c4df0ea7e0ea1e94ec28fea0db035f5c5933c8f6c36
    • MD5 SHA1 SHA512 SSDEEP
    • Queries the phone number (MSISDN for GSM devices)

    • Reads the content of the SMS messages.

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

    • Tries to add a device administrator.

MITRE ATT&CK Mobile v15

Tasks