privateloader | 15d22edfc88648c578c9c64c310cbd08bced650df872f06cf8abc5f5c4cc1796 | Triage

Sharing

General

Target

3734f828b836c87583c82e5105726d36_JaffaCakes118
Size

17.8MB
Sample

240511-3yb31aeg9v
MD5

3734f828b836c87583c82e5105726d36
SHA1

5f4162d16872f2b45197ff46bb3aa5f316d2d557
SHA256

15d22edfc88648c578c9c64c310cbd08bced650df872f06cf8abc5f5c4cc1796
SHA512

4cc4b30d968ee4974e23ffbf34fddaf624b0e718586de0d5b3a77960927cb61df689634dd9adc449f3fb02c86d2f800a3edf4bbc34b5c9947a0257bdec3c68cf
SSDEEP

393216:r97OPPb3GpixA9AuaA/dZk3dN0fdhnUelvqDh2d9FhJp2pKpxJRip:JoipwA9A+lZkevUSvqDhiHHBnop

Score

10^/10

privateloader android discovery evasion

Malware Config

Targets

- Target
  
  3734f828b836c87583c82e5105726d36_JaffaCakes118
- Size
  
  17.8MB
- MD5
  
  3734f828b836c87583c82e5105726d36
- SHA1
  
  5f4162d16872f2b45197ff46bb3aa5f316d2d557
- SHA256
  
  15d22edfc88648c578c9c64c310cbd08bced650df872f06cf8abc5f5c4cc1796
- SHA512
  
  4cc4b30d968ee4974e23ffbf34fddaf624b0e718586de0d5b3a77960927cb61df689634dd9adc449f3fb02c86d2f800a3edf4bbc34b5c9947a0257bdec3c68cf
- SSDEEP
  
  393216:r97OPPb3GpixA9AuaA/dZk3dN0fdhnUelvqDh2d9FhJp2pKpxJRip:JoipwA9A+lZkevUSvqDhiHHBnop
Score

7^/10

discovery evasion
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Acquires the wake lock
- Checks if the internet connection is available
  discovery
behavioral1 behavioral2

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion

behavioral2