Extracted

• • Target

    0561f70e015e11bc18f20467665ec6ec_JaffaCakes118

  • Size

    5.0MB

  • MD5

    0561f70e015e11bc18f20467665ec6ec

  • SHA1

    bbb9f43d8f257380c46b5c84f8394709ebfc0367

  • SHA256

    b176592831805119e4df999c3c96430b20d810c8bcfbe268cd90d0ceaa77abc3

  • SHA512

    7a3277ed16f1902ed88aedff5fe04e3e81b088b2de3342dba432a4868a95188c07ee89a69050d0a48dbcdcccf002357756f78b7e9a9753057ce33cf356882c44

  • SSDEEP

    98304:rf8NhqZmFm+yzgQJYrJXtwUw5fyL6qaRPAq3TK1M6VH02Sqf0H3zQw:Any/J8JLwyyIqW1pdB2XzQw

  Score

  10^/10

  smsfactorydiscoveryevasionexecutionimpactinfostealerpersistencetrojan

  • SMSFactory

    SMSFactory is an Android SMS trojan malware first seen in Jun 2022.

    trojaninfostealersmsfactory

  • Checks if the Android device is rooted.

    evasion

  • Acquires the wake lock

  • Queries information about active data network

    discovery

  • Queries information about the current Wi-Fi connection

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery

  • Reads information about phone network operator.

    discovery
  behavioral1behavioral2behavioral3