27fea44dea984d0fd2be6aed3ee6865a275b231e17d4d6337f4863d34a449837

General

Target

efa39995ab448a3b44f5598dec55c458_JaffaCakes118
Size

20.6MB
Sample

240921-mzzmpayenp
MD5

efa39995ab448a3b44f5598dec55c458
SHA1

f25a27ea8fc1df60c27c11b63181737fef181a9e
SHA256

27fea44dea984d0fd2be6aed3ee6865a275b231e17d4d6337f4863d34a449837
SHA512

25264624b83568ce29369604ceb06964b498f7aec445342b7ee7afcfc448cc6b7a2cffdcbfa41859b74099d8e01acb0fcc2f2992c487a51850899b14ba0d9345
SSDEEP

393216:NEYLcg7Y63xCjhhSkjw2VqatFMVi6IZMJAxEKDJz+dAoUszHkEB0T2hC1N0970XR:qt63pkjXIatS72MqtoDLkEB7hCHu70XR

Score

8^/10

Malware Config

Targets

- Target
  
  efa39995ab448a3b44f5598dec55c458_JaffaCakes118
- Size
  
  20.6MB
- MD5
  
  efa39995ab448a3b44f5598dec55c458
- SHA1
  
  f25a27ea8fc1df60c27c11b63181737fef181a9e
- SHA256
  
  27fea44dea984d0fd2be6aed3ee6865a275b231e17d4d6337f4863d34a449837
- SHA512
  
  25264624b83568ce29369604ceb06964b498f7aec445342b7ee7afcfc448cc6b7a2cffdcbfa41859b74099d8e01acb0fcc2f2992c487a51850899b14ba0d9345
- SSDEEP
  
  393216:NEYLcg7Y63xCjhhSkjw2VqatFMVi6IZMJAxEKDJz+dAoUszHkEB0T2hC1N0970XR:qt63pkjXIatS72MqtoDLkEB7hCHu70XR
Score

8^/10

discovery evasion impact persistence
- Checks if the Android device is rooted.
  evasion
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
behavioral1
- Target
  
  alipay_plugin.apk
- Size
  
  353KB
- MD5
  
  dd52e580fdc30c22ff74a0a95699812b
- SHA1
  
  dab8078684009e38a42cf6558334034c65abfe4c
- SHA256
  
  fce475f3b93395275715d091da317ddc1a2b90ae7f69a2fc92054fed54b0305a
- SHA512
  
  ba8f12c9f2f08a3597b8885046005f14a88be3225a9436effa1f88ff3621eef937328470650532184c7fd93eaf4fa3889f3a8302dda6d1e9a0f1ca364a4d8370
- SSDEEP
  
  6144:WMlT2W4wFsn+Ma0dirSaWXwP6o3Ju0x2L3Rp5tPVKt9m8rpvCpCBJO0:WMl4wFU+MaoihWAN54htduNrpvCAvT
Score

7^/10

collection discovery evasion
- Requests cell location
  Uses Android APIs to to get current cell location.
  collection discovery evasion
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
behavioral2