be67abeafb5e6f2372ce4cb11fa4ef39ec7d7d1f7009abff8074d3e0eb06b5e8 | Triage

Sharing

General

Target

e7dbd149ba780d3645fa2cee710a1d5f_JaffaCakes118
Size

9.7MB
Sample

240408-tj4p2agg6y
MD5

e7dbd149ba780d3645fa2cee710a1d5f
SHA1

a7ae84fb602c68d0feb85c50c8827a2b79ae1d37
SHA256

be67abeafb5e6f2372ce4cb11fa4ef39ec7d7d1f7009abff8074d3e0eb06b5e8
SHA512

9a23c191ddcc9173321890b7d11cdcd667f482c7fe95c5c9fe13c48c32ef00b681b41fb77906a828991d6d179b8d95af5e7b0d8c4ce02a413f5a58083afdc5e7
SSDEEP

196608:RLALb9OLXxU1M8Y6I8DLkVKP0gXDBfNFbwLd3wLdL42VO1tugQ:R81FkVKP0gTvFbiWHk2

Score

8^/10

android collection discovery evasion

Malware Config

Targets

- Target
  
  e7dbd149ba780d3645fa2cee710a1d5f_JaffaCakes118
- Size
  
  9.7MB
- MD5
  
  e7dbd149ba780d3645fa2cee710a1d5f
- SHA1
  
  a7ae84fb602c68d0feb85c50c8827a2b79ae1d37
- SHA256
  
  be67abeafb5e6f2372ce4cb11fa4ef39ec7d7d1f7009abff8074d3e0eb06b5e8
- SHA512
  
  9a23c191ddcc9173321890b7d11cdcd667f482c7fe95c5c9fe13c48c32ef00b681b41fb77906a828991d6d179b8d95af5e7b0d8c4ce02a413f5a58083afdc5e7
- SSDEEP
  
  196608:RLALb9OLXxU1M8Y6I8DLkVKP0gXDBfNFbwLd3wLdL42VO1tugQ:R81FkVKP0gTvFbiWHk2
Score

8^/10

collection discovery evasion
- Requests cell location
  Uses Android APIs to to get current cell location.
  collection discovery
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Queries information about running processes on the device.
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Reads information about phone network operator.
  discovery
behavioral1
- Target
  
  BaiduNaviSDK_Resource_v1_0_0.png
- Size
  
  1.4MB
- MD5
  
  038c785558c6743e09a31631b9f04d1d
- SHA1
  
  42ae6b74d418c4d839600471718b62dfd7d812a9
- SHA256
  
  e9fc11fa95dc1e95a2cd4ef86905acdd79cfb71ba4ff9912c8e46b59ed685e45
- SHA512
  
  573bfcc3effcece86e5ef8f0e9a84e9dd523936ef9224861a0ff834d35fb7d662e965e13ed5265306549c61d4458c7687471f680d7bf217004590c118de15794
- SSDEEP
  
  24576:w9o5l0aiDLYxvm6iugA1Ft3unH1jR49OLt1xJqkqFn/wS2mM4:6ql07DL4e6Fpj36Hz49OLt1xorh/1M4
Score

1^/10
behavioral2 behavioral3 behavioral4

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

Location Tracking

Process Discovery

System Information Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Location Tracking

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

collectiondiscoveryevasion

behavioral2

behavioral3

behavioral4