General

  • Target

    88e83411d5bdba87c17445707f70aae9_JaffaCakes118

  • Size

    6.7MB

  • Sample

    241103-bm2eza1anc

  • MD5

    88e83411d5bdba87c17445707f70aae9

  • SHA1

    189d4cec1fe60836fd5c61a60763874e276dccba

  • SHA256

    a704fabed022b22f4a87204e0e15bcd48399988ff54b6246fc63e503c722aea4

  • SHA512

    cf5818f899ec8aed74fecf43ca791510a2daf6746855445ce751cebf61f855e26fe637dfa1afd16f3df228c891b74984aab09c7291f7c91c4275c67ca73712e6

  • SSDEEP

    196608:fimyAxuNJG+JVmC3Uz6T7J2hM4eX0OF1m:KmyAxuNJG+/maUzS/4eq

Malware Config

Targets

    • Target

      88e83411d5bdba87c17445707f70aae9_JaffaCakes118

    • Size

      6.7MB

    • MD5

      88e83411d5bdba87c17445707f70aae9

    • SHA1

      189d4cec1fe60836fd5c61a60763874e276dccba

    • SHA256

      a704fabed022b22f4a87204e0e15bcd48399988ff54b6246fc63e503c722aea4

    • SHA512

      cf5818f899ec8aed74fecf43ca791510a2daf6746855445ce751cebf61f855e26fe637dfa1afd16f3df228c891b74984aab09c7291f7c91c4275c67ca73712e6

    • SSDEEP

      196608:fimyAxuNJG+JVmC3Uz6T7J2hM4eX0OF1m:KmyAxuNJG+/maUzS/4eq

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the mobile country code (MCC)

    • Reads information about phone network operator.

    • Target

      BannerPlugin-1.1.apk

    • Size

      21KB

    • MD5

      e8c3a06470661115c3c884e5ccae5307

    • SHA1

      a5b0956d22e31cbad02f8ea35828b0aad776469a

    • SHA256

      a01589dfc51692dbc4a5b8231a48ff3057e457dc22d30f6516af8a3ca63e59d4

    • SHA512

      93ccebdd3df7beecfd84d008edcee893a120b3a3feabf637cb165cd5c6a1b50d1841ea4205871b41788bdae858aa28157fe118aa0c9c9705c5e738d9d1bb213b

    • SSDEEP

      384:5yyQxUgqTfEIFpdXNxY38xPyUzwGaEUl56xDSr62pTGfsaftcTFhsIldVv8:5yyQqgqT8It03WP8PQo62pL8tu8adx8

    Score
    1/10
    • Target

      CommonPlugin-2.3.apk

    • Size

      592KB

    • MD5

      7cf3f7572af3e66f0dee823c37af5386

    • SHA1

      a8c74d683b80eeffc17ea0a7c25a0778370bdb62

    • SHA256

      6e93ceb0476209bbd50574052bd9c3f8873e70cdfe1aa40349b87015a11cc2cb

    • SHA512

      85f2815af544bd3fbcd0ebd42f502d99263eda3cf811e7adcd398f7d75bc20841a53a669937ff662398abba94dea2a32b1c9959827be5e5d364a7aa581e73382

    • SSDEEP

      12288:aZnfSPn3oeDa6AlAWVgLhW5Ws8W/5v+LjcCc5LmN09CjgcZ:SKnw3AWVgLhW5Ws8W/Fq9YCTZ

    Score
    1/10
    • Target

      ContainerPlugin-2.0.apk

    • Size

      54KB

    • MD5

      d85f2d18350bf7f0c3784cb161251e04

    • SHA1

      e8d55a5ccbb617f39ef7a148e333db2a4b09d950

    • SHA256

      0527e9885c676bc2d7409e2cec3e6d0091e49f11453624bbaa0250f100141599

    • SHA512

      0b91d91d5fb45fb24b49e4e374adbcf77a7d4058d6a47d612d9c74b23b344da6d8ffe75ab5602ec65066b035f3f2a90fed179d394ad8071eda4aaa4a635b1ae5

    • SSDEEP

      1536:B2WL16cYG9cdF5MYLIXCHZrTVXVAe4AcpsLkkq:BZL1YGnVkZrTV6bpsLvq

    Score
    1/10
    • Target

      FeedPlugin-1.1.apk

    • Size

      40KB

    • MD5

      8c183c347ddd6dd49654c365c830e492

    • SHA1

      51fad4381715d614d327ca2d4cb4ef27337dab61

    • SHA256

      3d185a50ca9a66f562bd7150d2da2ee5e6b6dc3357958ae97e297d8adc8651a9

    • SHA512

      eabf6eb597fe9ae581e21d2eed07e8a7cc48c19b8e6e8a78c4d6bc997a2a22d97cf0b001f7d289584128808b6b8febe4f056e2110b247d2a8edb286b06bcc851

    • SSDEEP

      768:kb8azqVJn3ynARvLmBoslN6Ut2GWyWE8YyXh:kbxMoARvyBosfyyWh

    Score
    1/10
    • Target

      FrameworkPlugin-2.3.apk

    • Size

      17KB

    • MD5

      13125a9716f1bde717c29b1cbcc1152b

    • SHA1

      8aa72bbc5bad951959495ea22e7ec759a99b01b0

    • SHA256

      e43c9fa6c23680111be0f0fb75886862ebeba992736a02e6ee448196803c1a77

    • SHA512

      e823ba64699491a7de31907552c89e48eb2e77e867d9d19ef9639fb11f23a2b93fe7af43d26b919a136ee7a7ecd22a26374ec8f29070c432c7af3d4d3020713a

    • SSDEEP

      384:5UX29se/3VxjLPKMpe9jWUdt2YpGM83AqoZuFeX+JVXuIjw48S:SX29n/3njWt/83AqHFfH8S

    Score
    1/10
    • Target

      TAEPlugin-1.0.apk

    • Size

      836KB

    • MD5

      5e053943189080f7e5d801ddabb5a6bf

    • SHA1

      24fa6e10a01f53bd3f59b0676ec78d01f4427a42

    • SHA256

      1db3d26438b037bb53f8eb1e02330ef8562b7d958792e902149af722e0c4ac96

    • SHA512

      9f0906e4f265c14519dfc2f77d8019f2f6d08a81c45e09bee449fc72ced4fc192f3bcef969162e829bf7a477786a2bed9da693124e018748cbe71d5eb8dc4589

    • SSDEEP

      12288:XHHYgoSeo6PqjZ2lZE8GD+qdMS3rxHDQGOADySPPlzXt0ZRtcPSk1ySST3Dgz5o:XYKV6w8ohtzDBhykBXt0KSk1MT3Deo

    Score
    1/10

MITRE ATT&CK Mobile v15

Tasks