94cf641f1400820ff6bfb46664a67b534bc1eaff2ab39b122f0bda905f9cd67d | Triage

Sharing

General

Target

f70239e7e7c7559e313c009f31702125_JaffaCakes118
Size

8.2MB
Sample

240418-b1b28sfd76
MD5

f70239e7e7c7559e313c009f31702125
SHA1

fe7e7cce84f1fe9237d7a2e947b3f100e0ef7dd5
SHA256

94cf641f1400820ff6bfb46664a67b534bc1eaff2ab39b122f0bda905f9cd67d
SHA512

2dcc0c94839a816b8276cf62364903d14004d4295b9d7bc03c2ffff778b56fed1dc83326a6fb5300910d6f393747304c9e54eb6fc522cd04803e13391f72d764
SSDEEP

196608:5za45ORGg4ysB1P5nKeyvnVm3LY9lhVaMQ0FJ4m:Fa45gGesB1PgvnVWLY9X34m

Score

8^/10

android collection discovery evasion

Malware Config

Targets

- Target
  
  f70239e7e7c7559e313c009f31702125_JaffaCakes118
- Size
  
  8.2MB
- MD5
  
  f70239e7e7c7559e313c009f31702125
- SHA1
  
  fe7e7cce84f1fe9237d7a2e947b3f100e0ef7dd5
- SHA256
  
  94cf641f1400820ff6bfb46664a67b534bc1eaff2ab39b122f0bda905f9cd67d
- SHA512
  
  2dcc0c94839a816b8276cf62364903d14004d4295b9d7bc03c2ffff778b56fed1dc83326a6fb5300910d6f393747304c9e54eb6fc522cd04803e13391f72d764
- SSDEEP
  
  196608:5za45ORGg4ysB1P5nKeyvnVm3LY9lhVaMQ0FJ4m:Fa45gGesB1PgvnVWLY9X34m
Score

8^/10

evasion collection discovery
- Requests cell location
  Uses Android APIs to to get current cell location.
  collection discovery
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries information about the current Wi-Fi connection.
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries information about the current nearby Wi-Fi networks.
  Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
  discovery
- Reads information about phone network operator.
  discovery
behavioral1 behavioral2 behavioral3
- Target
  
  __pasys_remote_banner.jar
- Size
  
  114KB
- MD5
  
  2ad9fb4b2d9b333883b7e38f61c2fd2f
- SHA1
  
  5b85041452d173ed0d81d25b9ca78608a998e328
- SHA256
  
  b9310a99f1b60959f6b725eea74623dc491adec55da740c17e8c7e02f35818f5
- SHA512
  
  6fc04e1e22ebf8920b4928a8086cf3e0814d155f79f80d71622916f6a0911262382710e5ee2acea653db4b387730e201134592cb9992b14f3aef8b09d83bda90
- SSDEEP
  
  3072:9cU7bD2h2Z5ecVpoj8eVJBl52Dx9yW0jv2gspIn:m8n28Z5eAs8S73InyWmug9
Score

1^/10
behavioral4 behavioral5 behavioral6

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

Location Tracking

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Location Tracking

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

collectiondiscoveryevasion

behavioral4

behavioral5

behavioral6