353b1456f0b9d16f3b6f633e14faaff0a07541d26bf125a17719d2596610ec1f

Sharing

Copy URL Twitter E-mail

General

Target
146a8ac7daca162b12407caffa5835db_JaffaCakes118
Size 18.8MB
Sample240627-dc2zvsyeqa
SHA256 353b1456f0b9d16f3b6f633e14faaff0a07541d26bf125a17719d2596610ec1f
MD5 146a8ac7daca162b12407caffa5835db
SHA1 d0054c72c9b808df60825da3842143af41ac66fc
SHA512 8cb73acb59dcefa69f2c66f2872e8d53f1761114155c090baf1414ef2fd405b76f970aecc863224de6958186ba5fbe2b1bc088f14c2f74dfc5501fe0ffec5f36
SSDEEP 393216:3QSH2eJNtayJOcO4BwkRyRWDk75F1xOBky945/HqyWuJp:3KwaMO+B07iV45/H0m
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Malware Config

Targets

- Target
  146a8ac7daca162b12407caffa5835db_JaffaCakes118
- Size 18.8MB
- SHA256 353b1456f0b9d16f3b6f633e14faaff0a07541d26bf125a17719d2596610ec1f
- MD5 146a8ac7daca162b12407caffa5835db
- SHA1 d0054c72c9b808df60825da3842143af41ac66fc
- SHA512 8cb73acb59dcefa69f2c66f2872e8d53f1761114155c090baf1414ef2fd405b76f970aecc863224de6958186ba5fbe2b1bc088f14c2f74dfc5501fe0ffec5f36
- SSDEEP 393216:3QSH2eJNtayJOcO4BwkRyRWDk75F1xOBky945/HqyWuJp:3KwaMO+B07iV45/H0m
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

banker discovery evasion impact persistence collection credential_access
- Checks if the Android device is rooted.
  evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about active data network
  discovery
- Queries the mobile country code (MCC)
  discovery
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
- Reads information about phone network operator.
  discovery
- Requests dangerous framework permissions
behavioral1 behavioral2 behavioral3
- Target
  cn.uc.gamesdk.loader.apk
- Size 7.1MB
- SHA256 e48b448bfe916bdb4caf7980792d227fc54b6065082d62bdb8c1296e52d54b30
- MD5 82ee7f6e1c1ab439fb68fc4e18b229a0
- SHA1 2a0e9a94141501a6f4144b829df10bcbf56626f0
- SHA512 0638b2552d0cb1e052d9a53a51c93f52c0d3c92c023f3520def5b9ddc06e5cca960767be6ee4a0f71949f6daa184dcc740d1f9b1dffe1f0fe1c8f954e8c9977c
- SSDEEP 196608:mqrJU1E1rzpGJr0gmu9PjHZyO8YF+Rj+3Blxwk/rMOcF5HJME:mokE1zsbZZ8YSjq7wk/ro/F
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral4 behavioral5 behavioral6
- Target
  libcn.uc.gamesdk.account.so
- Size 760KB
- SHA256 f9df226d899bd4ba66cd88770a35bab5d06a35ec66c09d1e0f41e2321acaf291
- MD5 ab81863e3a8c8098a7f4fe92402d5767
- SHA1 243a076903c3b4719afb6d2c0d9c3ca816e5220c
- SHA512 c7221b11516e121a3fc9ef9e9abc7394328407a51561babe8f2ee056ae75bf1ad986097b94a1bd6a71f766a64aaee294d2526d51e3907d8342a8d317f4c04c27
- SSDEEP 12288:pKOjLnFpIVKpSzW7c7aE6SUUlxtlair0O3jmO+IzBK/0fg:pK6nFpIQzcR6S7tSO3qp
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral7 behavioral8 behavioral9
- Target
  libcn.uc.gamesdk.asr.so
- Size 2.4MB
- SHA256 94107f619db1e8a3d1fe77b011ffae2a6ec2681228879753e7e7f7796d76a963
- MD5 7d99c3cff3f4b0b972c62a74ae6b4896
- SHA1 92a5835bbc8a435ce722e9a501653c22902b430d
- SHA512 601188349f233a5139c3818e1d36a269969e46d49ad1eff10037cc01e07ac90c8fcee17a815bb739934dec2df1acc7d4b4c6bbb8ad0efb707a55138877f248e9
- SSDEEP 49152:nEqL/9ABFpFZ87i5RVnZufc7VEBz3sKsTitQSijPiDe02pQE9YcJWhX/IVtDM:EyATpFZ8G3LukKBHsTitA302pQT4WhIA
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral10 behavioral11
- Target
  libcn.uc.gamesdk.core.so
- Size 2.4MB
- SHA256 9d54354763c458263eaa17333a26cc591492ff88f3aa809f3a99dfaf2264f06e
- MD5 d17f42e33f2b438bf33793494794ad5a
- SHA1 5afaf7957033f790c35bb94b5f23b549af5ea8b9
- SHA512 86ad893ec44c1d29d0b4281e703461a2662866ce22f0938d636f5b71f39e2a0811d8a0e563b65d65d5b0ed235262eb7856b1d2896526e704557188950512efde
- SSDEEP 49152:kPJZ3+6hb+5KNqPzP5AVV0i3akHFOG+RToJgoAjY7TtJgK2:qZ3+6hb+5KNqPzBabHM7p7OtKK2
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral12 behavioral13 behavioral14
- Target
  libcn.uc.gamesdk.floater.so
- Size 843KB
- SHA256 325b7ac51d0eb6f43647a388ecb3e8413becf3034c2dfa5b5722a6bc7d6a56e2
- MD5 4ea82843f16573957f098f38b837dcf8
- SHA1 68ad04adec9256fb741ca0ed448e8c1cc8291813
- SHA512 e7dcae6b635f8ad08c3885d829d783148b6afde8ecfeac9a630218c1adc62f16fd172d50542482e1006fd69afe1bd0db0c2dfbbb9fdb03988f5768644c69b5cd
- SSDEEP 24576:GB7xIJ1t1vbP43RYL0+2RUyonQqyWHA9JGE:+IPt1viYL0+qUytqAbGE
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral15 behavioral16 behavioral17
- Target
  libcn.uc.gamesdk.init.so
- Size 150KB
- SHA256 b81efda889324f7dfc50d7cbd2d9173f444527a098c1c40b5c08150590567c34
- MD5 f382d8b1d227a69fbfc5cb4922b2f868
- SHA1 12063973a21460133c6c30c89fdc7cd15b7f353b
- SHA512 a527fa0afea95ee2be0f58a0f44437759328db8f825cc328144cdeb6b6d508c41e6c2aaeeb471518239a79f9ee85552c23f96b5997133f84d28206ddd0d98d48
- SSDEEP 3072:devPBnF6fMOXn3nqG7r51NtNQVTcwSJdyDrDiS/Dg:YX7i3qGh1NtNiTGdypc
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral18 behavioral19 behavioral20
- Target
  libcn.uc.gamesdk.update.so
- Size 20KB
- SHA256 2c8f8d763046953392603a6dd02ecc630b465a8e6021c6b69572b94fc489371a
- MD5 bb7fb65bf5090a4d8a37a5e0a50c926f
- SHA1 5031a7c560c77b193e596f65df272d178e69aa54
- SHA512 9bdc79f74c31a70510dcd7b8436d481821180bfbbb8b9b82aea6c5590b0a679ead80515b0af2b9342249d98567ba97ddd8aa41681245c98a6963233b3626c770
- SSDEEP 384:LfKoJn3zmrgM7Avs5unUk41Xm9K6MaYWMf9Zu4zJos/B+nZPCGnZKsrYKV:GSn/M8vWk4hCUrZJuSBO17Wg
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral21 behavioral22 behavioral23
- Target
  ucsdk.apk
- Size 37KB
- SHA256 8ad31017a72b5afd54856038d992514ffe66e56b508f34897992426344f7a46a
- MD5 1e5d2ae8f1e890c4182fd46f6a84f932
- SHA1 7f86c7f330038b2fb2289723b483c4077edacc3d
- SHA512 d08231273c8c4338917a73ceb8fa963246feaa47eb028e6faf25dffcee42fb0c7efa7e4067b96bd7427abb83bc63a0ecb6c29368167ba129e403c8bb0c4ff15e
- SSDEEP 768:1MV1jZsxScAGt1Iz+2+mfoNtr9MbUPEETVKZKGefwB29qAdOKd4:2VpaxScAYIzNfatGnEIEGHg9qAQKd4
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral24 behavioral25 behavioral26
- Target
  vivounionapk_v2.2.41_a1e788e_201708101947.vua
- Size 3.0MB
- SHA256 4b0a741b1158767c032a2cedaaa1b63726a1c658004527d195298a828d303af2
- MD5 3248f54bbd1b25712393c0ffae0ac586
- SHA1 bd1142b337fc19e09762e938e2174a860f1780b1
- SHA512 4f7aa55f10526feaf8be053f0633aff3cc47c9f86ba9e0d723e3d335ac73fdd0ca6c3ade44c01d9b3dc37290a648d54154c877de59cded41b309bffde6d3e1ea
- SSDEEP 49152:vha0tP3ogJhIDaIzmVAI0tWkL6c8knFf5O2/wwby4VesOKVKkwKSIYOka7SmvvoO:Z3BJyD8iIMW5cRFRO2/Bb7Ve98KTKtYS
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral27