General
-
Target
d1e5fc2752c5cf3c74f02c0eb3e151b4_JaffaCakes118
-
Size
22.5MB
-
Sample
240907-pahzratcpl
-
MD5
d1e5fc2752c5cf3c74f02c0eb3e151b4
-
SHA1
95f9fdc578a55d9a70eb75d2d0322aa53bac1f91
-
SHA256
59b90753bc8d58d827d1fe65a5a4f19217508e7c47a39e32689a02876eccab32
-
SHA512
1ec2e5528333aa52c3b5da9cf48a426957e67eed917664174af1abdac186764868c00ebd05ea4dc80c5daa3e294f1733ff4309efd4e13d251c1359b4f80661bf
-
SSDEEP
393216:+1DjzCuLqZlY91PP/W0z9zifO3VKymQD+CnJLKy5AMmHTMIIsDAuOhUZsumTXjkj:UDj2QWlYP7zifOFKjmN/5psxIsQTXO
Static task
static1
Behavioral task
behavioral1
Sample
d1e5fc2752c5cf3c74f02c0eb3e151b4_JaffaCakes118.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral2
Sample
d1e5fc2752c5cf3c74f02c0eb3e151b4_JaffaCakes118.apk
Resource
android-x64-20240910-en
Malware Config
Targets
-
-
Target
d1e5fc2752c5cf3c74f02c0eb3e151b4_JaffaCakes118
-
Size
22.5MB
-
MD5
d1e5fc2752c5cf3c74f02c0eb3e151b4
-
SHA1
95f9fdc578a55d9a70eb75d2d0322aa53bac1f91
-
SHA256
59b90753bc8d58d827d1fe65a5a4f19217508e7c47a39e32689a02876eccab32
-
SHA512
1ec2e5528333aa52c3b5da9cf48a426957e67eed917664174af1abdac186764868c00ebd05ea4dc80c5daa3e294f1733ff4309efd4e13d251c1359b4f80661bf
-
SSDEEP
393216:+1DjzCuLqZlY91PP/W0z9zifO3VKymQD+CnJLKy5AMmHTMIIsDAuOhUZsumTXjkj:UDj2QWlYP7zifOFKjmN/5psxIsQTXO
-
Checks if the Android device is rooted.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about active data network
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the mobile country code (MCC)
-
Queries the unique device ID (IMEI, MEID, IMSI)
-
Reads information about phone network operator.
-
Listens for changes in the sensor environment (might be used to detect emulation)
-
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Scheduled Task/Job
1Defense Evasion
Download New Code at Runtime
1Execution Guardrails
1Geofencing
1Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
2System Checks
2