General
- Target 9a6a0065d390836ece27df30ba14db7f_JaffaCakes118
- Size 5.0MB
- Sample240815-rxayrs1dlm
- SHA256 4da1a07d52db4243c001d32265f0a1951091bfde058c4919ef2e973a24c2a8ca
- MD5 9a6a0065d390836ece27df30ba14db7f
- SHA1 0cf21e39120f41f5c96360faa9260443aa9db809
- SHA512 81d1302021d133b802a8b6ca0252097a7cf2bcd6930ed7881c1996652de2adc66348c66e2183b16865f08d3b5df0c7f1b576a5dc0040e99fb931783e498146ec
- SSDEEP 98304:1zkLWIFcjwYlBRHXs+53WlmBmVg0sN50dy4/X4gWgDQB1+SqfaHVxgw:1zwTFcEqBRsKou0sNbSogWgcBQk1xgw
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
9a6a0065d390836ece27df30ba14db7f_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
9a6a0065d390836ece27df30ba14db7f_JaffaCakes118.apk
Resource
android-x64-20240624-en
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
9a6a0065d390836ece27df30ba14db7f_JaffaCakes118.apk
Resource
android-x64-arm64-20240624-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smsfactory
C2
-
http://smartlink.mobilelinks.xyz
Targets
-
- Target 9a6a0065d390836ece27df30ba14db7f_JaffaCakes118
- Size 5.0MB
- SHA256 4da1a07d52db4243c001d32265f0a1951091bfde058c4919ef2e973a24c2a8ca
- MD5 9a6a0065d390836ece27df30ba14db7f
- SHA1 0cf21e39120f41f5c96360faa9260443aa9db809
- SHA512 81d1302021d133b802a8b6ca0252097a7cf2bcd6930ed7881c1996652de2adc66348c66e2183b16865f08d3b5df0c7f1b576a5dc0040e99fb931783e498146ec
- SSDEEP 98304:1zkLWIFcjwYlBRHXs+53WlmBmVg0sN50dy4/X4gWgDQB1+SqfaHVxgw:1zwTFcEqBRsKou0sNbSogWgcBQk1xgw
- MD5 SHA1 SHA512 SSDEEP
-
SMSFactory
SMSFactory is an Android SMS trojan malware first seen in Jun 2022.
-
Checks if the Android device is rooted.
-
Acquires the wake lock
-
Queries information about active data network
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Reads information about phone network operator.
MITRE ATT&CK Mobile v15
Tasks
static1
smsfactory
Score
10/10
behavioral1
smsfactorydiscoveryevasionexecutionimpactinfostealerpersistencetrojan
Score
10/10
behavioral2
smsfactorydiscoveryevasionexecutionimpactinfostealerpersistencetrojan
Score
10/10
behavioral3
smsfactorydiscoveryevasionexecutionimpactinfostealerpersistencetrojan
Score
10/10