cd112be7e4ae9aa4a2cd784e1ee1e5feec2b1faec3490f422405c4b20b5227ed | Triage

Sharing

General

Target

3f5b60f6f18745f7b9c74f0f4ea3c934_JaffaCakes118
Size

16.4MB
Sample

240513-n12n4sdc9w
MD5

3f5b60f6f18745f7b9c74f0f4ea3c934
SHA1

dbc2b4d507a24e10557cb2f016ec8de7e5aa2128
SHA256

cd112be7e4ae9aa4a2cd784e1ee1e5feec2b1faec3490f422405c4b20b5227ed
SHA512

ab413eae833fba928f9862028ecdf981032d831bbb114d2bb37e2ce380589ef6961460c7f87d10fc813c5ddb06a03e5e9e3b1ee0bd07d8f7c502d8ada0a217da
SSDEEP

393216:0iJX4/dhqXk8YGM95JNqwGN7/3jYIdqmqlPxetoOrylnQWzIzNq:08o/dhq0JlpGZTgEryzANq

Score

7^/10

android discovery evasion impact persistence

Malware Config

Targets

- Target
  
  3f5b60f6f18745f7b9c74f0f4ea3c934_JaffaCakes118
- Size
  
  16.4MB
- MD5
  
  3f5b60f6f18745f7b9c74f0f4ea3c934
- SHA1
  
  dbc2b4d507a24e10557cb2f016ec8de7e5aa2128
- SHA256
  
  cd112be7e4ae9aa4a2cd784e1ee1e5feec2b1faec3490f422405c4b20b5227ed
- SHA512
  
  ab413eae833fba928f9862028ecdf981032d831bbb114d2bb37e2ce380589ef6961460c7f87d10fc813c5ddb06a03e5e9e3b1ee0bd07d8f7c502d8ada0a217da
- SSDEEP
  
  393216:0iJX4/dhqXk8YGM95JNqwGN7/3jYIdqmqlPxetoOrylnQWzIzNq:08o/dhq0JlpGZTgEryzANq
Score

7^/10

discovery evasion impact persistence
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Checks if the internet connection is available
  discovery
- Reads information about phone network operator.
  discovery
- Requests dangerous framework permissions
behavioral1
- Target
  
  mimo_asset.apk
- Size
  
  300KB
- MD5
  
  b3bc6255feea6cd9398fa0cc9da7a88d
- SHA1
  
  85924ff9afd7531e191367a1c1c086829161fa19
- SHA256
  
  8de83f61dbba332ba95cdeefea24114adc08f483b45398a53bf06f5608e4d65e
- SHA512
  
  0020ec00005ac5127d9425dea6713980881d33b72c767c42d0237fad5cf403c751a6d8d153ce6b4286e227042b36c0909e2a7af55b635963193e6cc99e78a644
- SSDEEP
  
  6144:9ZuHNuP4S37gQ3HSBSZGFbtxTPgVpqzjDPNHcPLwyU8wgKZ/sCtYte:ewPD73HyVL0VpqzjrhW35KdJYte
Score

1^/10
behavioral2 behavioral3 behavioral4

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Download New Code at Runtime

Credential Access

Discovery

Process Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Tasks

static1

behavioral1

discoveryevasionimpactpersistence

behavioral2

behavioral3

behavioral4