General

  • Target

    59d14ddf677045e7ce1388fca3bf6b4e_JaffaCakes118

  • Size

    5.9MB

  • Sample

    241018-3hetyswdpr

  • MD5

    59d14ddf677045e7ce1388fca3bf6b4e

  • SHA1

    221adb579160bb1fc5b8e3a6586f2c2e2c5bb94b

  • SHA256

    9cc019f2dbf820e49cebdf19731104f8eb1904c18f15ac7e20ea1042f2b21851

  • SHA512

    ce3a1f51557fc5480921a49bac9117e884e265563cefb6ba3f037f5135dd533d129f470ce1e7af29d41d0acf4146227d435827305298beee90c044eca45bb8ff

  • SSDEEP

    98304:ZLDRT+UaVP5Jbu7ge94ooYwB/yHLIh6C7Mp4LhOSJZHEQ9uXNydAAmOzm23NRNgp:ZLR8TEUQMh6C7MGREQcX45ba23NkY0TF

Malware Config

Targets

    • Target

      59d14ddf677045e7ce1388fca3bf6b4e_JaffaCakes118

    • Size

      5.9MB

    • MD5

      59d14ddf677045e7ce1388fca3bf6b4e

    • SHA1

      221adb579160bb1fc5b8e3a6586f2c2e2c5bb94b

    • SHA256

      9cc019f2dbf820e49cebdf19731104f8eb1904c18f15ac7e20ea1042f2b21851

    • SHA512

      ce3a1f51557fc5480921a49bac9117e884e265563cefb6ba3f037f5135dd533d129f470ce1e7af29d41d0acf4146227d435827305298beee90c044eca45bb8ff

    • SSDEEP

      98304:ZLDRT+UaVP5Jbu7ge94ooYwB/yHLIh6C7Mp4LhOSJZHEQ9uXNydAAmOzm23NRNgp:ZLR8TEUQMh6C7MGREQcX45ba23NkY0TF

    • BadMirror

      BadMirror is an Android infostealer first seen in March 2016.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries the phone number (MSISDN for GSM devices)

    • Reads the content of the SMS messages.

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the mobile country code (MCC)

    • Reads information about phone network operator.

    • Listens for changes in the sensor environment (might be used to detect emulation)

MITRE ATT&CK Mobile v15

Tasks