irata | 71bb4b9db79d5b32cb425e68fe2b6181c1f2dbfd6d9bdb605ce0831abfd2c879

General

Target

013f27aedaa260dd3a876637d8094207_JaffaCakes118
Size

4.2MB
Sample

240426-vmn97agb83
MD5

013f27aedaa260dd3a876637d8094207
SHA1

bb7f332e9b752e173a9af2aea6f4a67b1273d366
SHA256

71bb4b9db79d5b32cb425e68fe2b6181c1f2dbfd6d9bdb605ce0831abfd2c879
SHA512

b7afc034fa9755d2218711798de62c4d52e8ad8356dfa9b3fdb2efc5d09f1419feebde42ba13be1f4baba6231f285056b17f0b12feaef11cbf2bad77d96e3f15
SSDEEP

98304:+qU2nTfAEwzbJ4NAkmNutky/bvhmQd4Ac8R4gyIR6mWxq0p:zU2nzA34NUQb74Accyk6mWM0p

Score

10^/10

Malware Config

Targets

- Target
  
  013f27aedaa260dd3a876637d8094207_JaffaCakes118
- Size
  
  4.2MB
- MD5
  
  013f27aedaa260dd3a876637d8094207
- SHA1
  
  bb7f332e9b752e173a9af2aea6f4a67b1273d366
- SHA256
  
  71bb4b9db79d5b32cb425e68fe2b6181c1f2dbfd6d9bdb605ce0831abfd2c879
- SHA512
  
  b7afc034fa9755d2218711798de62c4d52e8ad8356dfa9b3fdb2efc5d09f1419feebde42ba13be1f4baba6231f285056b17f0b12feaef11cbf2bad77d96e3f15
- SSDEEP
  
  98304:+qU2nTfAEwzbJ4NAkmNutky/bvhmQd4Ac8R4gyIR6mWxq0p:zU2nzA34NUQb74Accyk6mWM0p
Score

8^/10

banker collection discovery evasion persistence credential_access impact
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Requests cell location
  Uses Android APIs to to get current cell location.
  collection discovery
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Queries information about the current nearby Wi-Fi networks
  Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
  discovery
- Queries the mobile country code (MCC)
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Acquires the wake lock
- Checks if the internet connection is available
  discovery
- Reads information about phone network operator.
  discovery
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Requests cell location

Checks CPU information

Checks memory information

Obtains sensitive information copied to the device clipboard

Queries information about the current nearby Wi-Fi networks

Queries the mobile country code (MCC)

Registers a broadcast receiver at runtime (usually for listening for system events)

Acquires the wake lock

Checks if the internet connection is available

Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3