4a982809dda2157ece2d4da296027dfd345caa2b0ebebe35339d6ab0828a4ab3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20c1bc3d8e01c0fe3452e75fbdac37cd_JaffaCakes118
Size

2.5MB
Sample

240507-rceq8aae3y
MD5

20c1bc3d8e01c0fe3452e75fbdac37cd
SHA1

e262d2139f95914f289867cbf384c3b9153fec73
SHA256

4a982809dda2157ece2d4da296027dfd345caa2b0ebebe35339d6ab0828a4ab3
SHA512

a816c2547b15a03652287ecfc4bf80a55d347b4ac58e50fcd536827053898f555f4129530a84b0ca2d330ce19ccbdf85811087e1a03cae89bbb80e4157d32b33
SSDEEP

49152:BSe8oZvnZCQs+SE2AufApvq+ji+jYehqtI9dXtj1KlFusi8voSgbwUnRUpKVGShI:ce8uvnLs+SE2A5qgiALXTXtO/5APMUqv

Score

7^/10

android discovery evasion impact

Malware Config

Targets

- Target
  
  20c1bc3d8e01c0fe3452e75fbdac37cd_JaffaCakes118
- Size
  
  2.5MB
- MD5
  
  20c1bc3d8e01c0fe3452e75fbdac37cd
- SHA1
  
  e262d2139f95914f289867cbf384c3b9153fec73
- SHA256
  
  4a982809dda2157ece2d4da296027dfd345caa2b0ebebe35339d6ab0828a4ab3
- SHA512
  
  a816c2547b15a03652287ecfc4bf80a55d347b4ac58e50fcd536827053898f555f4129530a84b0ca2d330ce19ccbdf85811087e1a03cae89bbb80e4157d32b33
- SSDEEP
  
  49152:BSe8oZvnZCQs+SE2AufApvq+ji+jYehqtI9dXtj1KlFusi8voSgbwUnRUpKVGShI:ce8uvnLs+SE2A5qgiALXTXtO/5APMUqv
Score

7^/10

discovery evasion impact
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Checks if the internet connection is available
  discovery
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
- Reads information about phone network operator.
  discovery
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Tasks

static1

behavioral1

discoveryevasionimpact

behavioral2

discoveryevasionimpact

behavioral3

discoveryevasionimpact