Overview

overview

8

Static

static

6

cf852d351c...18.apk

android-9-x86

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    cf852d351cadd6347e77b9dd8147e3c3_JaffaCakes118

  • Size

    19.9MB

  • Sample

    240906-ph7yvawanl

  • MD5

    cf852d351cadd6347e77b9dd8147e3c3

  • SHA1

    9f6a27202473f1418527d8522c2ac75e8210b08e

  • SHA256

    31a0b1e5ca5ce611bb124aa05852301d8d4128f4e45556976a0a565c59efd7d3

  • SHA512

    baa0bf7df7d64387ebf073ee0947cfcafa9fcd94b435ca527a7431b00a6ed114835455f6d75f51b3355d2e9eef75425327060618d00a6a2300de5684039f5845

  • SSDEEP

    393216:irqn2Ji6oWLGhuvWsGorIhpDnQTkfZ9LQuiVtGIsgL6Wg8qGBcMEems:irwX6oWLdWiunXfZlLGt6Tznems

Score
8/10
androiddiscoveryevasionimpactpersistence

Malware Config

Targets

    • Target

      cf852d351cadd6347e77b9dd8147e3c3_JaffaCakes118

    • Size

      19.9MB

    • MD5

      cf852d351cadd6347e77b9dd8147e3c3

    • SHA1

      9f6a27202473f1418527d8522c2ac75e8210b08e

    • SHA256

      31a0b1e5ca5ce611bb124aa05852301d8d4128f4e45556976a0a565c59efd7d3

    • SHA512

      baa0bf7df7d64387ebf073ee0947cfcafa9fcd94b435ca527a7431b00a6ed114835455f6d75f51b3355d2e9eef75425327060618d00a6a2300de5684039f5845

    • SSDEEP

      393216:irqn2Ji6oWLGhuvWsGorIhpDnQTkfZ9LQuiVtGIsgL6Wg8qGBcMEems:irwX6oWLdWiunXfZlLGt6Tznems

    Score
    8/10
    discoveryevasionimpactpersistence

    • Checks if the Android device is rooted.

      evasion

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

      evasion

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

      discovery

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

      discovery

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

      discovery

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

      discovery

    • Reads information about phone network operator.

      discovery
    behavioral1

MITRE ATT&CK Mobile v15

Tasks