Extracted

• • Target

    9a6a0065d390836ece27df30ba14db7f_JaffaCakes118

  • Size

    5.0MB

  • MD5

    9a6a0065d390836ece27df30ba14db7f

  • SHA1

    0cf21e39120f41f5c96360faa9260443aa9db809

  • SHA256

    4da1a07d52db4243c001d32265f0a1951091bfde058c4919ef2e973a24c2a8ca

  • SHA512

    81d1302021d133b802a8b6ca0252097a7cf2bcd6930ed7881c1996652de2adc66348c66e2183b16865f08d3b5df0c7f1b576a5dc0040e99fb931783e498146ec

  • SSDEEP

    98304:1zkLWIFcjwYlBRHXs+53WlmBmVg0sN50dy4/X4gWgDQB1+SqfaHVxgw:1zwTFcEqBRsKou0sNbSogWgcBQk1xgw

  Score

  10^/10

  smsfactorydiscoveryevasionexecutionimpactinfostealerpersistencetrojan

  • SMSFactory

    SMSFactory is an Android SMS trojan malware first seen in Jun 2022.

    trojaninfostealersmsfactory

  • Checks if the Android device is rooted.

    evasion

  • Acquires the wake lock

  • Queries information about active data network

    discovery

  • Queries information about the current Wi-Fi connection

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery

  • Reads information about phone network operator.

    discovery
  behavioral1behavioral2behavioral3