7080e58f1a02b1d2e8083ef01e2ae9b11de1fb1467d7e53fbc8f37730ff478c5

General

Target
6c95f4dca1564e434fd22c175b492fe0_JaffaCakes118
Size 679KB
Sample241023-bfvc3stbmg
SHA256 7080e58f1a02b1d2e8083ef01e2ae9b11de1fb1467d7e53fbc8f37730ff478c5
MD5 6c95f4dca1564e434fd22c175b492fe0
SHA1 a975cca4010a592c4c450b16f564a7eb38e421ae
SHA512 238168a3d6775a975505231c65cf013c2adcf212617455d18bfa26743f93de7aa3063e2497589987575078867b32986da5cfb18ed01542336152b6d844963b74
SSDEEP 12288:g/CKljQulqSbzcPZI+YcHy1X2rCjhbewXC26PZI+YcHy1X2rbZ5qo:sCKlJqu6++pHIXOAhawk++pHIXOl5qo
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Malware Config

Targets

- Target
  6c95f4dca1564e434fd22c175b492fe0_JaffaCakes118
- Size 679KB
- SHA256 7080e58f1a02b1d2e8083ef01e2ae9b11de1fb1467d7e53fbc8f37730ff478c5
- MD5 6c95f4dca1564e434fd22c175b492fe0
- SHA1 a975cca4010a592c4c450b16f564a7eb38e421ae
- SHA512 238168a3d6775a975505231c65cf013c2adcf212617455d18bfa26743f93de7aa3063e2497589987575078867b32986da5cfb18ed01542336152b6d844963b74
- SSDEEP 12288:g/CKljQulqSbzcPZI+YcHy1X2rCjhbewXC26PZI+YcHy1X2rbZ5qo:sCKlJqu6++pHIXOAhawk++pHIXOl5qo
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

banker discovery evasion impact persistence stealth trojan collection credential_access
- Removes its main activity from the application launcher
  stealth trojan evasion
- Checks Android system properties for emulator presence.
  evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries the mobile country code (MCC)
  discovery
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
behavioral1 behavioral2 behavioral3
- Target
  polyvideo.apk
- Size 388KB
- SHA256 edceaaa805c0f3c74557331bc209ab0452e12a5390322f1dcbfc96dd653a4e82
- MD5 e7e4a401eb53b4393aacf9f4a54cf4d7
- SHA1 a25d23fc8fa3fd6d341dd03e809581022c865b1f
- SHA512 0512ac87b5626a6a1c32d1f90b2d53f2210767fa7794f4fe123213b19ce1681db276384dcc525b1e72aaa9e2a31114cb131b5c556f753ba9f7c1031de879d46c
- SSDEEP 6144:S/C/KKJWF0w3Nv++8RfNulq+rAqPwT8B1zr9+ju2Z0MG+zEcHy1X28aBwGSUr2hl:S/CKljQulqSbzcPZI+YcHy1X2rCjhbZ
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

banker discovery evasion impact persistence collection credential_access
- Checks Android system properties for emulator presence.
  evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about active data network
  discovery
- Queries the mobile country code (MCC)
  discovery
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
behavioral4 behavioral5 behavioral6