General
- Target 75269011160ad8b48192149f1f688051_JaffaCakes118
- Size 563KB
- Sample240726-wrc86avgrp
- SHA256 62d01acc0ad1722218cd72843bc8688169cf1ae1aadf066838ee97d85eba90c1
- MD5 75269011160ad8b48192149f1f688051
- SHA1 a23e50a9fa144c514ce013300cd53a1f3bf2d0e9
- SHA512 b64a96d7fb1a3ec471d5eb389cc3dcbb0c831c10be2b6650061e698f1394a10e34abc15a191cca5097b55dd422f926566c616232c56ec04e04a6e12dad487ac4
- SSDEEP 12288:a5YWRkS8w9vT4LMOIdW/tKC7KMkhGoyQPoGLMkhGoyQPoGLEkhGoyQPoGLhkhGok:a5YrS8wp4LAe7myQgrmyQgLmyQg6myQo
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
75269011160ad8b48192149f1f688051_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
75269011160ad8b48192149f1f688051_JaffaCakes118.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
75269011160ad8b48192149f1f688051_JaffaCakes118.apk
Resource
android-x64-arm64-20240624-en
Malware Config
Targets
-
- Target 75269011160ad8b48192149f1f688051_JaffaCakes118
- Size 563KB
- SHA256 62d01acc0ad1722218cd72843bc8688169cf1ae1aadf066838ee97d85eba90c1
- MD5 75269011160ad8b48192149f1f688051
- SHA1 a23e50a9fa144c514ce013300cd53a1f3bf2d0e9
- SHA512 b64a96d7fb1a3ec471d5eb389cc3dcbb0c831c10be2b6650061e698f1394a10e34abc15a191cca5097b55dd422f926566c616232c56ec04e04a6e12dad487ac4
- SSDEEP 12288:a5YWRkS8w9vT4LMOIdW/tKC7KMkhGoyQPoGLMkhGoyQPoGLEkhGoyQPoGLhkhGok:a5YrS8wp4LAe7myQgrmyQgLmyQg6myQo
- MD5 SHA1 SHA512 SSDEEP
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Queries the phone number (MSISDN for GSM devices)
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Performs UI accessibility actions on behalf of the user
Application may abuse the accessibility service to prevent their removal.
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
-
Requests disabling of battery optimizations (often used to enable hiding in the background).
-
Requests enabling of the accessibility settings.
MITRE ATT&CK Mobile v15
Defense Evasion
Foreground Persistence
1Hide Artifacts
2Suppress Application Icon
1User Evasion
1Impair Defenses
1Prevent Application Removal
1Input Injection
1