General
-
Target
8af264c90cfc5d2e2020291fe1780ec7_JaffaCakes118
-
Size
1.8MB
-
Sample
241103-macrmasarp
-
MD5
8af264c90cfc5d2e2020291fe1780ec7
-
SHA1
912d12cb940e59a8a9af1519f432ebd5e9d7d710
-
SHA256
95094ca5403a22ce9fbeb6ce6373e51e641483aa727dd24e54bc6fa19dc28022
-
SHA512
d8db76615e34f143b3f98656f222ab8eb6e381354e8c569cc0525de83688416cfec0e901385b502916725bab8f3a81b8bffaa63c1cccd5bd40d8a15172eda586
-
SSDEEP
24576:Eop74Wi3UTHPPVntqyPGq01fyK7WNBhIPlasm0TmvMmkj9xOe1:Em4W3PVm6hfhIPhcvMg8
Static task
static1
Behavioral task
behavioral1
Sample
8af264c90cfc5d2e2020291fe1780ec7_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
com.skymobi.pay.plugin.main_v10014.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral3
Sample
com.skymobi.pay.plugin.main_v10014.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral4
Sample
com.skymobi.pay.plugin.main_v10014.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral5
Sample
com.skymobi.pay.plugin.recordupload_v10009.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral6
Sample
com.skymobi.pay.plugin.recordupload_v10009.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral7
Sample
com.skymobi.pay.plugin.recordupload_v10009.apk
Resource
android-x64-arm64-20240624-en
Malware Config
Targets
-
-
Target
8af264c90cfc5d2e2020291fe1780ec7_JaffaCakes118
-
Size
1.8MB
-
MD5
8af264c90cfc5d2e2020291fe1780ec7
-
SHA1
912d12cb940e59a8a9af1519f432ebd5e9d7d710
-
SHA256
95094ca5403a22ce9fbeb6ce6373e51e641483aa727dd24e54bc6fa19dc28022
-
SHA512
d8db76615e34f143b3f98656f222ab8eb6e381354e8c569cc0525de83688416cfec0e901385b502916725bab8f3a81b8bffaa63c1cccd5bd40d8a15172eda586
-
SSDEEP
24576:Eop74Wi3UTHPPVntqyPGq01fyK7WNBhIPlasm0TmvMmkj9xOe1:Em4W3PVm6hfhIPhcvMg8
Score8/10-
Checks if the Android device is rooted.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries the phone number (MSISDN for GSM devices)
-
Reads the content of SMS inbox messages.
-
Reads the content of the SMS messages.
-
Queries information about active data network
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the mobile country code (MCC)
-
-
-
Target
com.skymobi.pay.plugin.main_v10014.pl
-
Size
58KB
-
MD5
b0a39aaa44ac82ec0fd321914f6aa668
-
SHA1
10a20428675480d68cbc64a5a4be12bde81aaca2
-
SHA256
e44f6d6dc173a53f4d7e4bbcbc92bf991ffea14af1612ee29b81f56c33b6d5ef
-
SHA512
fde8a61b36e3a27acd98ce24b594b71690456c40f76785dac0a4809f66570d4196b60e1e47616cf9855faac18822fe6d953b59534a39506daa15c7a285d70999
-
SSDEEP
1536:3a3tkLIW2T8X1S2TN6DH3twagFsydRWd69RJwC27nLt:qmkW1lSiNsaapSRWd61wd7Lt
Score1/10 -
-
-
Target
com.skymobi.pay.plugin.recordupload_v10009.pl
-
Size
38KB
-
MD5
55c24dc00f667f62ee0cc0dfca41fc28
-
SHA1
1811dd0ba5f5bdfeef743332b7ef1b8e4097a23c
-
SHA256
8199c84eb1412ac9f13edc3bff4cd66e788847143bd0c8497ce7f699a0d68e77
-
SHA512
b5a5269065f4bcf05c560315255c49dc7eafc015458eca425f6b44eec0ee74c3e1d481e06df70deca25056a8fd070efb5adcf364061a8e5c1e26fb8e102caf69
-
SSDEEP
768:Tf5Ui0Wh/Ndv7j7LF12NADhHl2ASeCYuD:+WNNdDJ0NahHMAS3D
Score1/10 -
MITRE ATT&CK Mobile v15
Defense Evasion
Download New Code at Runtime
1Execution Guardrails
1Geofencing
1Virtualization/Sandbox Evasion
2System Checks
2