Errors

Reason
zip: not a valid zip file
Reason
zip: not a valid zip file

General

  • Target
    ef76f412df4275fbeac3e98b7c1661c9_JaffaCakes118
  • Size 18.1MB
  • Sample240921-kz93bavanr
  • SHA256 b6d88c1b604301462d0eeaa97ca9a114b61e1d66eecb60636906ccf90644446c
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • sandrorat

C2
  • 192.168.1.5:1337

Signatures

  • Sandrorat family
  • Requests dangerous framework permissions 14 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • ef76f412df4275fbeac3e98b7c1661c9_JaffaCakes118
    .zip 18.1MB
  • DroidJack.4.4.Cracked.2.02.2016/DroidJack/.DS_Store
    10KB
  • DroidJack.4.4.Cracked.2.02.2016/DroidJack/Apktool/.DS_Store
    6KB
  • DroidJack.4.4.Cracked.2.02.2016/DroidJack/Apktool/SandroRat.apk
    .apk 252KB
  • DroidJack.4.4.Cracked.2.02.2016/DroidJack/Apktool/aapts.zip
    .zip 810KB
  • aapt
    .macho 1.1MB
  • aapt.exe
    .exe 833KB
  • DroidJack.4.4.Cracked.2.02.2016/DroidJack/Apktool/apktool.jar
    .jar 6.0MB
  • DroidJack.4.4.Cracked.2.02.2016/DroidJack/Apktool/certificate.pem
    1001B
  • DroidJack.4.4.Cracked.2.02.2016/DroidJack/Apktool/efm.jar
    4KB
  • DroidJack.4.4.Cracked.2.02.2016/DroidJack/Apktool/key.pk8
    633B
  • DroidJack.4.4.Cracked.2.02.2016/DroidJack/Apktool/signapk.jar
    .jar 7KB
  • DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/commons-codec-1.6.jar
    .jar 227KB
  • DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/commons-io-2.4.jar
    .jar 180KB
  • DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/commons-lang3-3.3.2.jar
    .jar 403KB
  • DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/commons-logging-1.1.1.jar
    .jar 59KB
  • DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/fluent-hc-4.2.5.jar
    .jar 21KB
  • DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/httpclient-4.2.5.jar
    .jar 423KB
  • DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/httpclient-cache-4.2.5.jar
    .jar 112KB
  • DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/httpcore-4.2.4.jar
    .jar 221KB
  • DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/httpmime-4.2.5.jar
    .jar 25KB
  • DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/jaad-0.8.4.jar
    .jar 653KB
  • DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/json.jar
    .jar 47KB
  • DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/kryonet-2.21-all.jar
    .jar 329KB
  • DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/quaqua.jar
    .jar 2.0MB
  • DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/sqlite-jdbc-3.8.11.2.jar
    .jar 5.3MB
  • DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/sqljet-1.1.10.jar
    .jar 744KB
  • DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/zip4j_1.3.2.jar
    .jar 127KB
  • DroidJack.4.4.Cracked.2.02.2016/DroidJack/Droidjack.jar
    .jar 1.6MB
  • DroidJack.4.4.Cracked.2.02.2016/DroidJack/Readme.txt
    6KB
  • DroidJack.4.4.Cracked.2.02.2016/__MACOSX/DroidJack/._.DS_Store
    120B
  • DroidJack.4.4.Cracked.2.02.2016/__MACOSX/DroidJack/._Readme.txt
    171B
  • DroidJack.4.4.Cracked.2.02.2016/__MACOSX/DroidJack/Apktool/._.DS_Store
    120B
  • DroidJack.4.4.Cracked.2.02.2016/__MACOSX/DroidJack/Apktool/._apktool.jar
    177B

ef76f412df4275fbeac3e98b7c1661c9_JaffaCakes118

  • SHA256 b6d88c1b604301462d0eeaa97ca9a114b61e1d66eecb60636906ccf90644446c
  • MD5 SHA1 SHA512 SSDEEP