Overview

overview

10

Static

static

10

jaffacakes....d.apk

android-9-x86

6

jaffacakes....d.apk

android-10-x64

6

jaffacakes....d.apk

android-11-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    jaffacakes118_HEUR.Trojan-SMS.AndroidOS.Agent.d.ab00f2363e0337290ffcabb5a6debbe4
  • Size 3.4MB
  • Sample261015-cwmtlsba47
  • SHA256 a97be5ad4b6a773ca2c8537711ab934aedff3a5219b2b0f5b5137a9359de84b7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
redhookandroiddiscoveryinfostealerrattrojan

Malware Config

Extracted

Family

  • redhook

C2

  • 重新建立连接

Targets

    • Target
      jaffacakes118_HEUR.Trojan-SMS.AndroidOS.Agent.d.ab00f2363e0337290ffcabb5a6debbe4
    • Size 3.4MB
    • SHA256 a97be5ad4b6a773ca2c8537711ab934aedff3a5219b2b0f5b5137a9359de84b7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Queries information about active data network

      discovery

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

      discovery

    • Queries the unique device ID (IMEI, MEID, IMSI)

      discovery

    • Reads information about phone network operator.

      discovery
    behavioral1behavioral2behavioral3

MITRE ATT&CK Mobile v16

Tasks