General

  • Target

    eab468e4860b9cd3be82137bcd0476b9_JaffaCakes118

  • Size

    19.1MB

  • Sample

    240919-gkyh7atgnm

  • MD5

    eab468e4860b9cd3be82137bcd0476b9

  • SHA1

    de7f02a1ee7b4561971aec126fceeb2f58dfef3c

  • SHA256

    0032274481e9190256dcf016a51ce793e7dfda4518405db2717294bb1cb8cc82

  • SHA512

    41dec1f4972f636fcab1291a03c620b3ac481030635f92c5085a44bbb255c6ce2b78b2ccf0031cedb378aacd04a5733b62cbbfe630fd8c722f57b123b04f3914

  • SSDEEP

    393216:VB0mDXaiwmFEgKPTWssxVil5N6P0Vb9OzRurApH3Hr32E4PcDkRRTXOTMum1fdaB:4mDXtwsX4WsE0VbMqYXL34rX3f4i6

Malware Config

Targets

    • Target

      eab468e4860b9cd3be82137bcd0476b9_JaffaCakes118

    • Size

      19.1MB

    • MD5

      eab468e4860b9cd3be82137bcd0476b9

    • SHA1

      de7f02a1ee7b4561971aec126fceeb2f58dfef3c

    • SHA256

      0032274481e9190256dcf016a51ce793e7dfda4518405db2717294bb1cb8cc82

    • SHA512

      41dec1f4972f636fcab1291a03c620b3ac481030635f92c5085a44bbb255c6ce2b78b2ccf0031cedb378aacd04a5733b62cbbfe630fd8c722f57b123b04f3914

    • SSDEEP

      393216:VB0mDXaiwmFEgKPTWssxVil5N6P0Vb9OzRurApH3Hr32E4PcDkRRTXOTMum1fdaB:4mDXtwsX4WsE0VbMqYXL34rX3f4i6

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Reads information about phone network operator.

    • Requests cell location

      Uses Android APIs to to get current cell information.

    • Listens for changes in the sensor environment (might be used to detect emulation)

MITRE ATT&CK Mobile v15

Tasks