General
- Target 75269011160ad8b48192149f1f688051_JaffaCakes118
- Size 563KB
- Sample240726-wrc86avgrp
- SHA256 62d01acc0ad1722218cd72843bc8688169cf1ae1aadf066838ee97d85eba90c1
- MD5 75269011160ad8b48192149f1f688051
- SHA1 a23e50a9fa144c514ce013300cd53a1f3bf2d0e9
- SHA512 b64a96d7fb1a3ec471d5eb389cc3dcbb0c831c10be2b6650061e698f1394a10e34abc15a191cca5097b55dd422f926566c616232c56ec04e04a6e12dad487ac4
- SSDEEP 12288:a5YWRkS8w9vT4LMOIdW/tKC7KMkhGoyQPoGLMkhGoyQPoGLEkhGoyQPoGLhkhGok:a5YrS8wp4LAe7myQgrmyQgLmyQg6myQo
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
75269011160ad8b48192149f1f688051_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
75269011160ad8b48192149f1f688051_JaffaCakes118.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
75269011160ad8b48192149f1f688051_JaffaCakes118.apk
Resource
android-x64-arm64-20240624-en
Malware Config
Targets
-
- Target 75269011160ad8b48192149f1f688051_JaffaCakes118
- Size 563KB
- SHA256 62d01acc0ad1722218cd72843bc8688169cf1ae1aadf066838ee97d85eba90c1
- MD5 75269011160ad8b48192149f1f688051
- SHA1 a23e50a9fa144c514ce013300cd53a1f3bf2d0e9
- SHA512 b64a96d7fb1a3ec471d5eb389cc3dcbb0c831c10be2b6650061e698f1394a10e34abc15a191cca5097b55dd422f926566c616232c56ec04e04a6e12dad487ac4
- SSDEEP 12288:a5YWRkS8w9vT4LMOIdW/tKC7KMkhGoyQPoGLMkhGoyQPoGLEkhGoyQPoGLhkhGok:a5YrS8wp4LAe7myQgrmyQgLmyQg6myQo
- MD5 SHA1 SHA512 SSDEEP
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
Queries the phone number (MSISDN for GSM devices)
Acquires the wake lock
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
Performs UI accessibility actions on behalf of the user
Application may abuse the accessibility service to prevent their removal.
Queries information about active data network
Queries the mobile country code (MCC)
Reads information about phone network operator.
Requests disabling of battery optimizations (often used to enable hiding in the background).
Requests enabling of the accessibility settings.
MITRE ATT&CK Mobile v15
Defense Evasion
Foreground Persistence
1Hide Artifacts
2Suppress Application Icon
1User Evasion
1Impair Defenses
1Prevent Application Removal
1Input Injection
1