badmirror

General

Target
59d14ddf677045e7ce1388fca3bf6b4e_JaffaCakes118
Size 5.9MB
Sample241018-3hetyswdpr
SHA256 9cc019f2dbf820e49cebdf19731104f8eb1904c18f15ac7e20ea1042f2b21851
MD5 59d14ddf677045e7ce1388fca3bf6b4e
SHA1 221adb579160bb1fc5b8e3a6586f2c2e2c5bb94b
SHA512 ce3a1f51557fc5480921a49bac9117e884e265563cefb6ba3f037f5135dd533d129f470ce1e7af29d41d0acf4146227d435827305298beee90c044eca45bb8ff
SSDEEP 98304:ZLDRT+UaVP5Jbu7ge94ooYwB/yHLIh6C7Mp4LhOSJZHEQ9uXNydAAmOzm23NRNgp:ZLR8TEUQMh6C7MGREQcX45ba23NkY0TF
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Targets

- Target
  59d14ddf677045e7ce1388fca3bf6b4e_JaffaCakes118
- Size 5.9MB
- SHA256 9cc019f2dbf820e49cebdf19731104f8eb1904c18f15ac7e20ea1042f2b21851
- MD5 59d14ddf677045e7ce1388fca3bf6b4e
- SHA1 221adb579160bb1fc5b8e3a6586f2c2e2c5bb94b
- SHA512 ce3a1f51557fc5480921a49bac9117e884e265563cefb6ba3f037f5135dd533d129f470ce1e7af29d41d0acf4146227d435827305298beee90c044eca45bb8ff
- SSDEEP 98304:ZLDRT+UaVP5Jbu7ge94ooYwB/yHLIh6C7Mp4LhOSJZHEQ9uXNydAAmOzm23NRNgp:ZLR8TEUQMh6C7MGREQcX45ba23NkY0TF
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

badmirror banker collection discovery evasion infostealer persistence rat trojan
- BadMirror
  BadMirror is an Android infostealer first seen in March 2016.
  trojan infostealer rat badmirror
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Reads the content of the SMS messages.
  collection
- Requests cell location
  Uses Android APIs to to get current cell location.
  collection discovery evasion
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries the mobile country code (MCC)
  discovery
- Reads information about phone network operator.
  discovery
- Listens for changes in the sensor environment (might be used to detect emulation)
  evasion
behavioral1