Overview

overview

7

Static

static

6

efc0a43fa8...18.apk

android-9-x86

7

BDTX140.apk

android-9-x86

BDTX140.apk

android-10-x64

BDTX140.apk

android-11-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    efc0a43fa8fe3856c6acb501c238492b_JaffaCakes118

  • Size

    1.7MB

  • Sample

    240921-n8k2bs1gkp

  • MD5

    efc0a43fa8fe3856c6acb501c238492b

  • SHA1

    edb8b63e7cf4b61ea9f0788be21e23cfde2ca549

  • SHA256

    2ec501ac78209a83f431d9982ca7ea4d705102076f5fcc0503652f1d8ee083a4

  • SHA512

    e02ea286c858369f3fc4410499ad80f2fa6ae909baa6814f381d483e4b5b0a7b37840a00515f9c86a4e38e40b179524bc42239a6274c5ff0d04190138d887235

  • SSDEEP

    24576:nLb4AEMlHKi2TGygkWeZ7FMPLHkSYSC+JKE/M+CDj54mwRXMWp4pW1TPU3:0kH5kLZJMP+QKE/IDumwRXt5FPi

Score
7/10
androidbankercollectiondiscoveryevasionimpactpersistence

Malware Config

Targets

    • Target

      efc0a43fa8fe3856c6acb501c238492b_JaffaCakes118

    • Size

      1.7MB

    • MD5

      efc0a43fa8fe3856c6acb501c238492b

    • SHA1

      edb8b63e7cf4b61ea9f0788be21e23cfde2ca549

    • SHA256

      2ec501ac78209a83f431d9982ca7ea4d705102076f5fcc0503652f1d8ee083a4

    • SHA512

      e02ea286c858369f3fc4410499ad80f2fa6ae909baa6814f381d483e4b5b0a7b37840a00515f9c86a4e38e40b179524bc42239a6274c5ff0d04190138d887235

    • SSDEEP

      24576:nLb4AEMlHKi2TGygkWeZ7FMPLHkSYSC+JKE/M+CDj54mwRXMWp4pW1TPU3:0kH5kLZJMP+QKE/IDumwRXt5FPi

    Score
    7/10
    bankercollectiondiscoveryevasionimpactpersistence

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

      evasion

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      bankerdiscovery

    • Reads the content of SMS inbox messages.

      collection

    • Reads the content of the SMS messages.

      collection

    • Requests cell location

      Uses Android APIs to to get current cell location.

      collectiondiscoveryevasion

    • Queries information about active data network

      discovery

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

      discovery

    • Queries the mobile country code (MCC)

      discovery

    • Requests dangerous framework permissions

    behavioral1

    • Target

      BDTX140

    • Size

      99KB

    • MD5

      3d216f8fddb9705a6720a285475837f1

    • SHA1

      f053d23b284bfe2faf6e76d353ff052471e2de2c

    • SHA256

      de7bf40574754a5144fa5cf3bc5e97f7adc7f5abebb18c41e8f0631917db4c0c

    • SHA512

      38be39da8f96abc87109cfd57b2d63ddfa72971f023024a5b4ce1f97cd905a96a94e19eea19ae9b745f28d02c6689a4473627ce57ec85dce2018a77e699620cb

    • SSDEEP

      3072:O/hr91fY/9tdWXLqQRClwYJ4sAAq4/IZn8NxQNRmDJS:2B9NMDGLqofsAAbNI8g

    Score
    1/10
    behavioral2behavioral3behavioral4

MITRE ATT&CK Mobile v15

Tasks