General

  • Target

    87e41c619c3d4e3ae3ac9d727f21a1ce_JaffaCakes118

  • Size

    3.2MB

  • Sample

    241102-1fslxswejh

  • MD5

    87e41c619c3d4e3ae3ac9d727f21a1ce

  • SHA1

    6a71eb5a779ff974600eb1ecc70d9a58a78f5c72

  • SHA256

    67135c11e773ef1cac8c1ae833506019f260e3a34b533bd5c89d1d04bd9c31f7

  • SHA512

    9e502832c184b46dec68a3af3f2042763a5a0af7a0df48871d067f0abe1de97efba3f819ffae44f6c10a7719a568d781308907c4b87f0ac94172ffd76dfc9a0a

  • SSDEEP

    98304:/nybtzJ8P36EpaYrRG/zztZ0AKQT/ho1dNVOAL3mi9Fn6Y:/nybVJ3Gbrk/zzta9Mho1dTOAL3mzY

Malware Config

Targets

    • Target

      87e41c619c3d4e3ae3ac9d727f21a1ce_JaffaCakes118

    • Size

      3.2MB

    • MD5

      87e41c619c3d4e3ae3ac9d727f21a1ce

    • SHA1

      6a71eb5a779ff974600eb1ecc70d9a58a78f5c72

    • SHA256

      67135c11e773ef1cac8c1ae833506019f260e3a34b533bd5c89d1d04bd9c31f7

    • SHA512

      9e502832c184b46dec68a3af3f2042763a5a0af7a0df48871d067f0abe1de97efba3f819ffae44f6c10a7719a568d781308907c4b87f0ac94172ffd76dfc9a0a

    • SSDEEP

      98304:/nybtzJ8P36EpaYrRG/zztZ0AKQT/ho1dNVOAL3mi9Fn6Y:/nybVJ3Gbrk/zzta9Mho1dTOAL3mzY

    • BadMirror

      BadMirror is an Android infostealer first seen in March 2016.

    • Badmirror family

    • Queries the phone number (MSISDN for GSM devices)

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the mobile country code (MCC)

MITRE ATT&CK Mobile v15

Tasks