ef6843fe34ff822787257f4284eed0c5bd4d97fb983382ebe1d843e5c21b7a4f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb6717ee1c0a432328e7d36da645b3d2_JaffaCakes118
Size

4.1MB
Sample

240419-3es76sac46
MD5

fb6717ee1c0a432328e7d36da645b3d2
SHA1

2f0d0ffb7a804e42db92855fd0e8060afd473247
SHA256

ef6843fe34ff822787257f4284eed0c5bd4d97fb983382ebe1d843e5c21b7a4f
SHA512

443bcf58a82d909efe5a4f6e96f1a764ff4a80b5c2332c90be8b2c26c5b18a78ab205dfcc7ec799253cae0d0dcbd1099fcadaf71a7cc646f80ef14eb76f9009e
SSDEEP

98304:8b+vm+WQgwFwIjQ62tLqKjM8HaD77Fw/98JdPbYM68pK:M+vmdPIjQBtLqG6Jw+76J

Score

7^/10

android discovery evasion persistence

Malware Config

Targets

- Target
  
  fb6717ee1c0a432328e7d36da645b3d2_JaffaCakes118
- Size
  
  4.1MB
- MD5
  
  fb6717ee1c0a432328e7d36da645b3d2
- SHA1
  
  2f0d0ffb7a804e42db92855fd0e8060afd473247
- SHA256
  
  ef6843fe34ff822787257f4284eed0c5bd4d97fb983382ebe1d843e5c21b7a4f
- SHA512
  
  443bcf58a82d909efe5a4f6e96f1a764ff4a80b5c2332c90be8b2c26c5b18a78ab205dfcc7ec799253cae0d0dcbd1099fcadaf71a7cc646f80ef14eb76f9009e
- SSDEEP
  
  98304:8b+vm+WQgwFwIjQ62tLqKjM8HaD77Fw/98JdPbYM68pK:M+vmdPIjQBtLqG6Jw+76J
Score

7^/10

discovery evasion persistence
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Acquires the wake lock
- Checks if the internet connection is available
  discovery
behavioral1

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence