Overview

overview

7

Static

static

6

528f837d06...18.apk

android-9-x86

7

528f837d06...18.apk

android-13-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    528f837d06eeed41f47ad96a4764a574_JaffaCakes118
  • Size 17.3MB
  • Sample241017-tmalcsxbpl
  • SHA256 812a154d46d5fc703bc0b56eae32c2403038fa4c4e0086b3c85f1c8922f895ec
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
androidbankercollectiondiscoveryevasionimpactpersistence

Malware Config

Targets

    • Target
      528f837d06eeed41f47ad96a4764a574_JaffaCakes118
    • Size 17.3MB
    • SHA256 812a154d46d5fc703bc0b56eae32c2403038fa4c4e0086b3c85f1c8922f895ec
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    discoverypersistencebankercollectionevasionimpact

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      bankerdiscovery

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

      discovery

    • Requests cell location

      Uses Android APIs to to get current cell location.

      collectiondiscoveryevasion

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

      discovery

    • Listens for changes in the sensor environment (might be used to detect emulation)

      evasion
    behavioral1behavioral2

MITRE ATT&CK Mobile v15

Tasks