General

  • Target

    bca2c45be4f004c499b903a9812ec1d8_JaffaCakes118

  • Size

    5.7MB

  • Sample

    240618-srfshayhlg

  • MD5

    bca2c45be4f004c499b903a9812ec1d8

  • SHA1

    99b8aede338b9edc131b3c083d882e55abd0ea9e

  • SHA256

    1da428bdb69b8b91a54489e9992c0bd5d98316d5c66cbeea5a4f77e1dcf455da

  • SHA512

    4e291559e74847e673ef455862fe45fb8a1a7a8dee528e88a62adcc3de266b5ad994aeba4986090952084f7d28286a47be64090bb453188990158dc147d2d1ff

  • SSDEEP

    98304:U2ZUKM4V8RBwCTjLqM3rqsplE6CXQ0R7VfEKZo35q0OFUQ/YmlvrSdlPXCRwAy/:PA4V8RBwCTjF3NplE6Cg0R7VfhCIvTSX

Malware Config

Targets

    • Target

      bca2c45be4f004c499b903a9812ec1d8_JaffaCakes118

    • Size

      5.7MB

    • MD5

      bca2c45be4f004c499b903a9812ec1d8

    • SHA1

      99b8aede338b9edc131b3c083d882e55abd0ea9e

    • SHA256

      1da428bdb69b8b91a54489e9992c0bd5d98316d5c66cbeea5a4f77e1dcf455da

    • SHA512

      4e291559e74847e673ef455862fe45fb8a1a7a8dee528e88a62adcc3de266b5ad994aeba4986090952084f7d28286a47be64090bb453188990158dc147d2d1ff

    • SSDEEP

      98304:U2ZUKM4V8RBwCTjLqM3rqsplE6CXQ0R7VfEKZo35q0OFUQ/YmlvrSdlPXCRwAy/:PA4V8RBwCTjF3NplE6Cg0R7VfhCIvTSX

    Score
    6/10
    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Target

      alipay_msp.apk

    • Size

      354KB

    • MD5

      89c04e1ebcd58eca6dd93211628ed0bc

    • SHA1

      7d1e77ce25a635299704dbd95bd95c697572ea9d

    • SHA256

      ee3c608fff51b313f4e0b3e542bedccb4d4db4c8eb44e63bf4be0d468e9ee117

    • SHA512

      3dccaeff9906401855f3071c91012926d7e9250674ea0bb89606e4862223a8343fc7b9369afe4e50031d261b45437107c018f565da5615c49721c3bf1bf6ed01

    • SSDEEP

      6144:cH8LfOo+BjGVN8TdW4zxgnm1Us3JuOK2vf5C8EcPK+WvyQcQ2fnq7:cHLxBiVN8pWggmlY25CLE8RcQ2fnq7

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

MITRE ATT&CK Mobile v15

Tasks