General

  • Target

    30570ee1005a6188448777d165e70086_JaffaCakes118

  • Size

    4.9MB

  • Sample

    241010-rsefdswajr

  • MD5

    30570ee1005a6188448777d165e70086

  • SHA1

    71d3cfd598712683f5c1f206e964664dacc7868a

  • SHA256

    ee26ecf36ad390733d3e568caf1294a454099d91dd017fa39e02b1c4eb9a36de

  • SHA512

    62afa5c6680f7b7aca308c557ee05d69253f6a44a8df949b072a3349406115bc2d1dcbea381233f47b9459880e535664955337d917d889a45032576696c29121

  • SSDEEP

    98304:yJtAQEY6PHv5lvnGsJbOkNZNkt2TLhENUOHudezPbXafuN2OB:28DuwhfNktuLhENtOomWcy

Malware Config

Targets

    • Target

      30570ee1005a6188448777d165e70086_JaffaCakes118

    • Size

      4.9MB

    • MD5

      30570ee1005a6188448777d165e70086

    • SHA1

      71d3cfd598712683f5c1f206e964664dacc7868a

    • SHA256

      ee26ecf36ad390733d3e568caf1294a454099d91dd017fa39e02b1c4eb9a36de

    • SHA512

      62afa5c6680f7b7aca308c557ee05d69253f6a44a8df949b072a3349406115bc2d1dcbea381233f47b9459880e535664955337d917d889a45032576696c29121

    • SSDEEP

      98304:yJtAQEY6PHv5lvnGsJbOkNZNkt2TLhENUOHudezPbXafuN2OB:28DuwhfNktuLhENtOomWcy

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks