General

  • Target

    06d3d2e1651b7c82ae5418d3fdffd4a9_JaffaCakes118

  • Size

    27.2MB

  • Sample

    241001-wlawvashqn

  • MD5

    06d3d2e1651b7c82ae5418d3fdffd4a9

  • SHA1

    91bbd5974de07d6f12b524e33358601cce0f2696

  • SHA256

    c138ebe0c4a75d5020845c0ef5f3cc3f9f280e8362e69886da82c14c198848c4

  • SHA512

    413d91cc80d107489dadf498f70bfdebce4811d1e974b371849b1a79a0bcf393578ba8a0e09d101b24b865f45336ae67178add0e9d35eafe26af029c720162a9

  • SSDEEP

    786432:oA0fUiyJ+Zd+70iYGneX7kJb8LPDZrAVbi/6UmR:8+QvGneX74byiVbhR

Malware Config

Targets

    • Target

      06d3d2e1651b7c82ae5418d3fdffd4a9_JaffaCakes118

    • Size

      27.2MB

    • MD5

      06d3d2e1651b7c82ae5418d3fdffd4a9

    • SHA1

      91bbd5974de07d6f12b524e33358601cce0f2696

    • SHA256

      c138ebe0c4a75d5020845c0ef5f3cc3f9f280e8362e69886da82c14c198848c4

    • SHA512

      413d91cc80d107489dadf498f70bfdebce4811d1e974b371849b1a79a0bcf393578ba8a0e09d101b24b865f45336ae67178add0e9d35eafe26af029c720162a9

    • SSDEEP

      786432:oA0fUiyJ+Zd+70iYGneX7kJb8LPDZrAVbi/6UmR:8+QvGneX74byiVbhR

    • Checks if the Android device is rooted.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    • Queries the phone number (MSISDN for GSM devices)

    • Acquires the wake lock

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks