1763398fbdb20763e737daa4bcaafd55ecad4789b63eb1e8bdede80f19ce20d7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08711840bfc3000111cb6253aa9a5d54_JaffaCakes118
Size

30.8MB
Sample

240429-x3snnabb3t
MD5

08711840bfc3000111cb6253aa9a5d54
SHA1

da3143289be407e72e648798bc538d65e3fc73a1
SHA256

1763398fbdb20763e737daa4bcaafd55ecad4789b63eb1e8bdede80f19ce20d7
SHA512

cfbe9ed562faf08c2fd73cabbf6f62d39af0aa9bf0bba7b48119d98d2aa95de6504504b7355e827ddab6e8b9cc4f1f8183896c06f08ee6cf7285d58fbdab42d4
SSDEEP

786432:JMmIvLkGMAuoH0tXYGJEa/Oh7rp4vOJwPLy1PTLR:Jp6LkndofGnOhfKPO1PTt

Score

7^/10

android discovery evasion persistence

Malware Config

Targets

- Target
  
  08711840bfc3000111cb6253aa9a5d54_JaffaCakes118
- Size
  
  30.8MB
- MD5
  
  08711840bfc3000111cb6253aa9a5d54
- SHA1
  
  da3143289be407e72e648798bc538d65e3fc73a1
- SHA256
  
  1763398fbdb20763e737daa4bcaafd55ecad4789b63eb1e8bdede80f19ce20d7
- SHA512
  
  cfbe9ed562faf08c2fd73cabbf6f62d39af0aa9bf0bba7b48119d98d2aa95de6504504b7355e827ddab6e8b9cc4f1f8183896c06f08ee6cf7285d58fbdab42d4
- SSDEEP
  
  786432:JMmIvLkGMAuoH0tXYGJEa/Oh7rp4vOJwPLy1PTLR:Jp6LkndofGnOhfKPO1PTt
Score

7^/10

discovery evasion persistence
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
behavioral1 behavioral2

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasion