c1f45db4e2bdfe6841e948ee7bebf6eb5215c9394d35ccb116a6eaa86d9150f8 | Triage

Sharing

General

Target

09dda5e9ee9e1320e17ade169bab2055_JaffaCakes118
Size

7.9MB
Sample

240430-qx2k2sgb6w
MD5

09dda5e9ee9e1320e17ade169bab2055
SHA1

41013cc7a94fa84d098a5bc09aa6f1cf75f1aee6
SHA256

c1f45db4e2bdfe6841e948ee7bebf6eb5215c9394d35ccb116a6eaa86d9150f8
SHA512

bc21da8d5c5e2d82217fc891e615e664d44ac6731bf9f8790c5a028f6b0e995471279fc51f90108ea461cb12650449e67d0d13f54245c7de4a35636d90f56bf0
SSDEEP

196608:xuIJ84OKTSCI8T++e6sTLxqpQ1Y7fAHdoWN3FRr:xuIJ8UOCd+Tc/A9br

Score

7^/10

android discovery evasion persistence

Malware Config

Targets

- Target
  
  09dda5e9ee9e1320e17ade169bab2055_JaffaCakes118
- Size
  
  7.9MB
- MD5
  
  09dda5e9ee9e1320e17ade169bab2055
- SHA1
  
  41013cc7a94fa84d098a5bc09aa6f1cf75f1aee6
- SHA256
  
  c1f45db4e2bdfe6841e948ee7bebf6eb5215c9394d35ccb116a6eaa86d9150f8
- SHA512
  
  bc21da8d5c5e2d82217fc891e615e664d44ac6731bf9f8790c5a028f6b0e995471279fc51f90108ea461cb12650449e67d0d13f54245c7de4a35636d90f56bf0
- SSDEEP
  
  196608:xuIJ84OKTSCI8T++e6sTLxqpQ1Y7fAHdoWN3FRr:xuIJ8UOCd+Tc/A9br
Score

7^/10

discovery evasion persistence
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Acquires the wake lock
- Checks if the internet connection is available
  discovery
behavioral1
- Target
  
  alipay_plugin_20120428msp.apk
- Size
  
  286KB
- MD5
  
  4a89d8a1da67ffb789e71dcced41a691
- SHA1
  
  b72bc1d8920ed03c8bfcb8e431169f4508e71976
- SHA256
  
  5dab6575a279591032487cd2b8e428f7a90ac8b1fc4eacee245522feba2b2039
- SHA512
  
  a09342efcabc691c9efdf256c93e3f326d6785c7b2d6c1d4d12dfbdb676f544fcaa08ca373a550faebe3cdab2b5f82781e28cbf5f4779c3905851876eddc95d3
- SSDEEP
  
  6144:OV/Mo6jF1cM8qgmgMPE8fRsrYQ0d0ROgE8XF2Q9WDBRa/dEW7BhDJUK:OVWjFiCgxmpsrYQ0uR48XF2Q9W1R1Wlv
Score

1^/10
behavioral2 behavioral3 behavioral4

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

Process Discovery

System Information Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

behavioral3

behavioral4