General

  • Target

    f02a94c4daaf0799ecb061db755909c7_JaffaCakes118

  • Size

    572KB

  • Sample

    240921-tp3pxs1eke

  • MD5

    f02a94c4daaf0799ecb061db755909c7

  • SHA1

    6c5e5aee34ae14857327967e27b6663a1e59089e

  • SHA256

    f3bd68a06f227ad7c540323b2945ca8fb1b3d1b2b37d6907cc9e2cea0f448cb7

  • SHA512

    913f86f0c00f1ffbf0c34646e4636d014d0731db22fca40cee08112be0638dd8b3eece3a73081f9299169ec12bfc8c483682cba326f8e02c47357f936e98aa8f

  • SSDEEP

    12288:ZOn8HMj2KS2g7sD5uGuBOGnkWV3RJ8I2JwZqv7OI2JwZcrmwi:Q8sjk2N/uBOjSRWI2JwkiI2Jwii

Malware Config

Targets

    • Target

      f02a94c4daaf0799ecb061db755909c7_JaffaCakes118

    • Size

      572KB

    • MD5

      f02a94c4daaf0799ecb061db755909c7

    • SHA1

      6c5e5aee34ae14857327967e27b6663a1e59089e

    • SHA256

      f3bd68a06f227ad7c540323b2945ca8fb1b3d1b2b37d6907cc9e2cea0f448cb7

    • SHA512

      913f86f0c00f1ffbf0c34646e4636d014d0731db22fca40cee08112be0638dd8b3eece3a73081f9299169ec12bfc8c483682cba326f8e02c47357f936e98aa8f

    • SSDEEP

      12288:ZOn8HMj2KS2g7sD5uGuBOGnkWV3RJ8I2JwZqv7OI2JwZcrmwi:Q8sjk2N/uBOjSRWI2JwkiI2Jwii

    • Checks Android system properties for emulator presence.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries the phone number (MSISDN for GSM devices)

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the mobile country code (MCC)

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks