Resubmissions

20-09-2024 11:07

240920-m8ec4stckp 10

General

  • Target

    ed738d7d020745c3fae12c73af78062b_JaffaCakes118

  • Size

    2.4MB

  • Sample

    240920-m8ec4stckp

  • MD5

    ed738d7d020745c3fae12c73af78062b

  • SHA1

    ef3930277875a7e4a84b591ce31972f92c81e64d

  • SHA256

    e2de72782e08f156bdb34bf313a2b4ee5bd6ebe79db3779eb19972c95c14333f

  • SHA512

    0ecc341c7d4e1eeb61c6b7b8887d0e23fc99f60d10782b6d24ecb6fd54b6c32b080c97588231d8b73afafcd384aaece27cef30a81f9d138fe1315c12b3b18d8f

  • SSDEEP

    49152:R2oZCbUQ4igLXowZrV5rfQPScZWkKwWaPt7+eoZT6rkOEgbZXOI:R2oop4vVZrbL3cZWJct74Tqz

Malware Config

Extracted

Family

ahmyth

C2

http://193.161.193.99:63546

Targets

    • Target

      ed738d7d020745c3fae12c73af78062b_JaffaCakes118

    • Size

      2.4MB

    • MD5

      ed738d7d020745c3fae12c73af78062b

    • SHA1

      ef3930277875a7e4a84b591ce31972f92c81e64d

    • SHA256

      e2de72782e08f156bdb34bf313a2b4ee5bd6ebe79db3779eb19972c95c14333f

    • SHA512

      0ecc341c7d4e1eeb61c6b7b8887d0e23fc99f60d10782b6d24ecb6fd54b6c32b080c97588231d8b73afafcd384aaece27cef30a81f9d138fe1315c12b3b18d8f

    • SSDEEP

      49152:R2oZCbUQ4igLXowZrV5rfQPScZWkKwWaPt7+eoZT6rkOEgbZXOI:R2oop4vVZrbL3cZWJct74Tqz

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries the mobile country code (MCC)

MITRE ATT&CK Mobile v15

Tasks