40778e89c5d071440f088173f049bcacbc7887d6544d420077e89fae819f265f

Sharing

Copy URL

Twitter E-mail

General

Target

9e5b621238957743a367298ba9bfa868_JaffaCakes118
Size

5.0MB
Sample

241125-2rk7naxlep
MD5

9e5b621238957743a367298ba9bfa868
SHA1

5de3ef15cf348210675e148cb891dd3cb0c0b0aa
SHA256

40778e89c5d071440f088173f049bcacbc7887d6544d420077e89fae819f265f
SHA512

2e502ffe9ce80332db68cc25ad5530ffb07c17bf8cef157cc8b5b72a160d2cf9d3c26d292f2c512a46e38a5aa4a46d18886545d0784219aa6660869b21a5c837
SSDEEP

98304:Y7qlXKiSandODxfM6DSDSVWNhkS2bGFSIbcOA3SDvA0pYT6lGi72lvdjmDQu0:9XKitulxDtVg+f2SObvjAPT6n29d0Qu0

Score

7^/10

Malware Config

Targets

- Target
  
  9e5b621238957743a367298ba9bfa868_JaffaCakes118
- Size
  
  5.0MB
- MD5
  
  9e5b621238957743a367298ba9bfa868
- SHA1
  
  5de3ef15cf348210675e148cb891dd3cb0c0b0aa
- SHA256
  
  40778e89c5d071440f088173f049bcacbc7887d6544d420077e89fae819f265f
- SHA512
  
  2e502ffe9ce80332db68cc25ad5530ffb07c17bf8cef157cc8b5b72a160d2cf9d3c26d292f2c512a46e38a5aa4a46d18886545d0784219aa6660869b21a5c837
- SSDEEP
  
  98304:Y7qlXKiSandODxfM6DSDSVWNhkS2bGFSIbcOA3SDvA0pYT6lGi72lvdjmDQu0:9XKitulxDtVg+f2SObvjAPT6n29d0Qu0
Score

7^/10

banker collection discovery evasion impact persistence
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Reads the content of the SMS messages.
  collection
- Reads the content of the call log.
  collection
- Requests cell location
  Uses Android APIs to to get current cell location.
  collection discovery evasion
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
behavioral1
- Target
  
  com.skymobi.pay.plugin.main_v10017.pl
- Size
  
  59KB
- MD5
  
  4fe57f0dbc1364a52f9616aca9623ee8
- SHA1
  
  d3fbaaafd79ff09ec88ad343e46258cfbda4139b
- SHA256
  
  c4a8a02e900f4fb066a0e8d4c9e2976c9a0f252729058b2915fdc93eae65af49
- SHA512
  
  e08aec2c36ccddc5b16409bf2d62ed6aa5e2ef468025779b400997f86c0b0943fbe16012e21be8e99685e743b3ef77adfa74b4c7bc03d30f6a506520c0edf17d
- SSDEEP
  
  1536:8ZWPMIYcGLcXagIirfjDYvR76G86bHT01LVj:8Ze/KpTiXMN6LSHT05Vj
Score

1^/10
behavioral2 behavioral3 behavioral4
- Target
  
  com.skymobi.pay.plugin.recordupload_v10011.pl
- Size
  
  42KB
- MD5
  
  95f7902d7442815283d4473ed23f3cca
- SHA1
  
  d2576ae331a71fc43968ed53eb73623c966aa7a3
- SHA256
  
  40952f4694ea1ad807aaffb579f146287bda52a15db2fa631571eb59efb3666b
- SHA512
  
  e6ed8ccab7245ac352af3dab4eb866a7fe69c9374c8e3568630ba40a8ebcf1aee36ef2d3ff99941b3a900a1b7c60ab05fecc5b9fcc6a0754ece2feba4210bb06
- SSDEEP
  
  768:J8zZxl2ezpx6l9tgZO5Ea2Ahe5B9M2t78xC8cJOzibemqfM9+lsA:Juxl1zpQgZOt2z978WnemDA
Score

1^/10
behavioral5 behavioral6 behavioral7
- Target
  
  com.skymobi.pay.plugin.smspay_v10044.pl
- Size
  
  254KB
- MD5
  
  5a8049b029ce62f99c8021cad434532a
- SHA1
  
  040b12b0877580cbc3a0b1cb83dff56606d9171a
- SHA256
  
  ae43c158777c86f4f4f381ac9cf0c6a811402fd2570179d2641d8a2088304713
- SHA512
  
  f181c31f9bb1ad1c5cd94c86a2aaea0b0bf6247f4c50698cd12a186539298c3f6d588f4f51f8819fe8ba89e65cf38526d0debbf8f186e7ce23fd66ec0cabcc86
- SSDEEP
  
  6144:R5ds1oQKtR0HMDWGFq3+CxiQb8aFhbSfwuotPEBeN:zGc0sDW9dxiQNFhb4wuSEBq
Score

1^/10
behavioral10 behavioral8 behavioral9
- Target
  
  skymobi_pay_wxplugin.apk
- Size
  
  33KB
- MD5
  
  73d8a99bf9de4eb876f1739627197190
- SHA1
  
  135f99fe90f129274c74f5c9b032294bfae3d05a
- SHA256
  
  6d6f22a6688689b35a723620794bc03e958a69e1770073bd921d3c6129733f26
- SHA512
  
  d5d9068f5fbf3c85bafb8edf084c40e4411814f02542cde120815951c6a2cfae78a0b08f930ef7143f10145ce0abcbd942c44f54afbb0d963ba47c653a162049
- SSDEEP
  
  768:iwFX6Lei59coj/94ML6plol/S54bLhWQeJ:iwF0t5jj1/LMcaivhWQC
Score

4^/10

persistence
behavioral11 behavioral12 behavioral13
- Target
  
  unicom_resource.dat
- Size
  
  66KB
- MD5
  
  c0c137798872286f84f62e479bf5b632
- SHA1
  
  331716c743ffe18aa5fbcf7c81d7ea2e6e14e67b
- SHA256
  
  794ff618b6f2abd4b10bc61b10d9a2a18fe99737442c205f77dbf8aee18b7087
- SHA512
  
  3d70e73e6068da59f7da33bc98b33e52a10955c8bcbd72f1726f439ffdfe6a28ed0fbc981d556b7974e406d4289da1604a5ed2f9b662a2df75748ca5d6759315
- SSDEEP
  
  1536:uAAT2TgbOB/mePgQmNsxwUggsBKxRUFkNzKPcEhx:demchmUwKD
Score

1^/10
behavioral14 behavioral15 behavioral16