013b65e72203de580946544988fcb40d5459a86b28ef9071c777c9aeb5c68cf5

General

Target

302a823ee25ae8495dd7ffb33bdcf23f_JaffaCakes118
Size

6.1MB
Sample

241010-q14jtaybqd
MD5

302a823ee25ae8495dd7ffb33bdcf23f
SHA1

0f012a7bc5e99c5267d567ad2155a37b9ba92e67
SHA256

013b65e72203de580946544988fcb40d5459a86b28ef9071c777c9aeb5c68cf5
SHA512

381db8b3e3435188f90de419e6721d7ae8368fb7c1a35c8397ef28bcecb5667120564ed84ae1cdfc2ed9ac32dfc139fe318dba655d2ef9b82fb1d3a46e2fd1d9
SSDEEP

98304:pwcZtoFVky1M5WPAvkh2Ni/FZWzINbt9rCe96jkExYWjJNLU8Y:+M+FXWWYvDNi/KINJNH4CWDg

Score

7^/10

Malware Config

Targets

- Target
  
  302a823ee25ae8495dd7ffb33bdcf23f_JaffaCakes118
- Size
  
  6.1MB
- MD5
  
  302a823ee25ae8495dd7ffb33bdcf23f
- SHA1
  
  0f012a7bc5e99c5267d567ad2155a37b9ba92e67
- SHA256
  
  013b65e72203de580946544988fcb40d5459a86b28ef9071c777c9aeb5c68cf5
- SHA512
  
  381db8b3e3435188f90de419e6721d7ae8368fb7c1a35c8397ef28bcecb5667120564ed84ae1cdfc2ed9ac32dfc139fe318dba655d2ef9b82fb1d3a46e2fd1d9
- SSDEEP
  
  98304:pwcZtoFVky1M5WPAvkh2Ni/FZWzINbt9rCe96jkExYWjJNLU8Y:+M+FXWWYvDNi/KINJNH4CWDg
Score

7^/10

banker collection credential_access discovery evasion persistence
- Makes use of the framework's Accessibility service
  Retrieves information displayed on the phone screen using AccessibilityService.
  collection evasion credential_access
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about the current nearby Wi-Fi networks
  Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
  discovery
- Requests cell location
  Uses Android APIs to to get current cell location.
  collection discovery evasion
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries the mobile country code (MCC)
  discovery
- Reads information about phone network operator.
  discovery
behavioral1