6d7809811e1593cd3185acf233b17de1f3ad3f213a0b3ebeb372baeaa2464fc4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06d3970fdfc8ec322d1611934fc2dd30_JaffaCakes118
Size

12.4MB
Sample

240429-e6zl9sag4t
MD5

06d3970fdfc8ec322d1611934fc2dd30
SHA1

85ba7c64428bdbbf05abfeb40be6babd08ed659b
SHA256

6d7809811e1593cd3185acf233b17de1f3ad3f213a0b3ebeb372baeaa2464fc4
SHA512

554139e49ed994e2d673ee438fbff48bac1ab95f1ad3eda394819e5e6ebe69b3e9c7dd8f01a320f3ebdec355791877af961ec4b407c87e49f7f82f7caa5f173b
SSDEEP

393216:C7jH2wUlsKixPsKiCVsKi/t2sKiHOf3sKiw6Y:SjHtlKi6KibKi/bKiukKixY

Score

7^/10

android discovery evasion persistence

Malware Config

Targets

- Target
  
  06d3970fdfc8ec322d1611934fc2dd30_JaffaCakes118
- Size
  
  12.4MB
- MD5
  
  06d3970fdfc8ec322d1611934fc2dd30
- SHA1
  
  85ba7c64428bdbbf05abfeb40be6babd08ed659b
- SHA256
  
  6d7809811e1593cd3185acf233b17de1f3ad3f213a0b3ebeb372baeaa2464fc4
- SHA512
  
  554139e49ed994e2d673ee438fbff48bac1ab95f1ad3eda394819e5e6ebe69b3e9c7dd8f01a320f3ebdec355791877af961ec4b407c87e49f7f82f7caa5f173b
- SSDEEP
  
  393216:C7jH2wUlsKixPsKiCVsKi/t2sKiHOf3sKiw6Y:SjHtlKi6KibKi/bKiukKixY
Score

7^/10

discovery evasion persistence
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Queries the mobile country code (MCC)
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Checks if the internet connection is available
  discovery
- Reads information about phone network operator.
  discovery
behavioral1

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence