General

  • Target

    abda2773eefd5a7f9f94cea846489c82_JaffaCakes118

  • Size

    24.4MB

  • Sample

    240819-vmx74awclf

  • MD5

    abda2773eefd5a7f9f94cea846489c82

  • SHA1

    c2314321aca01e989c424970c7216a4411a25227

  • SHA256

    5a5def4d955bda4691572e67043bfcc0b50188cee01f1ad2deb71ff91fc0bcf4

  • SHA512

    9c16e31798bca3bae85c8097651976fef50b506a29233bf554aecd14cafded08eee0efb5d97f756f60cdbd96316de96d4f1e22a864db8dbd98a4564ab5416b6a

  • SSDEEP

    393216:TDnyiqk9jW9ekYDQsBuKfCriz+EQpOa52ADp0BMK6LGlpHBmsmH/nE2E0QwdwC:TewZtQ1KqiWOs2006K6opktjQowC

Malware Config

Targets

    • Target

      abda2773eefd5a7f9f94cea846489c82_JaffaCakes118

    • Size

      24.4MB

    • MD5

      abda2773eefd5a7f9f94cea846489c82

    • SHA1

      c2314321aca01e989c424970c7216a4411a25227

    • SHA256

      5a5def4d955bda4691572e67043bfcc0b50188cee01f1ad2deb71ff91fc0bcf4

    • SHA512

      9c16e31798bca3bae85c8097651976fef50b506a29233bf554aecd14cafded08eee0efb5d97f756f60cdbd96316de96d4f1e22a864db8dbd98a4564ab5416b6a

    • SSDEEP

      393216:TDnyiqk9jW9ekYDQsBuKfCriz+EQpOa52ADp0BMK6LGlpHBmsmH/nE2E0QwdwC:TewZtQ1KqiWOs2006K6opktjQowC

    • Checks if the Android device is rooted.

    • Checks Android system properties for emulator presence.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Queries account information for other applications stored on the device

      Application may abuse the framework's APIs to collect account information stored on the device.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about active data network

    • Queries the mobile country code (MCC)

    • Reads information about phone network operator.

    • Checks the presence of a debugger

MITRE ATT&CK Mobile v15

Tasks