2cedd5a45b09ccfc17a882b5914143538f5797fcba3594c9a3ad2332c06793fc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

232a56e71565f94819e81c7899498e74_JaffaCakes118
Size

31.4MB
Sample

240508-ex2p9sac71
MD5

232a56e71565f94819e81c7899498e74
SHA1

b5e31a015ed96e235f3ed8cb3d2186cb8696179b
SHA256

2cedd5a45b09ccfc17a882b5914143538f5797fcba3594c9a3ad2332c06793fc
SHA512

51c8605215cf18239a5a1b30fa2f9f250cae392253a072f3d04fc2452ff3af0aef2fd74728089743e5dfdef19acbbe415ff24120591000b9cd3feb0353de97cf
SSDEEP

786432:PAuvKKWP6I+7YMpFdxYJkoO/1cboUU1YxwgQHxO:Pj1WP6I6poO/u/uyfQH8

Score

7^/10

android discovery evasion persistence

Malware Config

Targets

- Target
  
  232a56e71565f94819e81c7899498e74_JaffaCakes118
- Size
  
  31.4MB
- MD5
  
  232a56e71565f94819e81c7899498e74
- SHA1
  
  b5e31a015ed96e235f3ed8cb3d2186cb8696179b
- SHA256
  
  2cedd5a45b09ccfc17a882b5914143538f5797fcba3594c9a3ad2332c06793fc
- SHA512
  
  51c8605215cf18239a5a1b30fa2f9f250cae392253a072f3d04fc2452ff3af0aef2fd74728089743e5dfdef19acbbe415ff24120591000b9cd3feb0353de97cf
- SSDEEP
  
  786432:PAuvKKWP6I+7YMpFdxYJkoO/1cboUU1YxwgQHxO:Pj1WP6I6poO/u/uyfQH8
Score

7^/10

discovery evasion persistence
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Checks if the internet connection is available
  discovery
- Reads information about phone network operator.
  discovery
behavioral1
- Target
  
  TencentUnipay.apk
- Size
  
  896KB
- MD5
  
  b6004ad4b164b2c12df5f76b6690206c
- SHA1
  
  8e72d70a725ede1453c538cebc0054e10bf6eb82
- SHA256
  
  6b59d8a37efb7fae731be1af0de7222c2ec68c9aab6fadc532720e16646ae18a
- SHA512
  
  9f70c76354861c12491cd22ba7d0351c19fcd97d17e985abe0a56a8d66d528bbef66478bf57d2e6391e3c4838f858888c746ecd3c9827e06875d567ade024f97
- SSDEEP
  
  24576:WtSc2MPOvP0jKXaqlOwM1jwpsmCUeLxWMrWYYuLxVIMUbd3:bc2MPO3JvsmCUMZLLxVa3
Score

7^/10

discovery evasion
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Checks if the internet connection is available
  discovery
behavioral2

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasion