b0b3774310059a437d23deed21beada60b5c119587c9c3fcab010218905c15f7 | Triage

Sharing

General

Target

40cd318246e08a43c2b7e7b13b912497_JaffaCakes118
Size

9.4MB
Sample

240514-j3qbmsgf65
MD5

40cd318246e08a43c2b7e7b13b912497
SHA1

654db22135370c24acf222d916b2c6f7201253da
SHA256

b0b3774310059a437d23deed21beada60b5c119587c9c3fcab010218905c15f7
SHA512

8f732dea05c697b66739146f57a4f29752c612559dc8193a981d657398abc7204f4e91e1e7e2412df26729f1e96cfd2269e7ef0d598cfe4d02a8db2cfdb68f8c
SSDEEP

196608:TwEKDHCCo5YXc7Y1e00kTKUOU7e7gvo0UakIsp1j:TwVo5X7B0zfOUy0vQh3

Score

7^/10

android discovery evasion impact persistence

Malware Config

Targets

- Target
  
  40cd318246e08a43c2b7e7b13b912497_JaffaCakes118
- Size
  
  9.4MB
- MD5
  
  40cd318246e08a43c2b7e7b13b912497
- SHA1
  
  654db22135370c24acf222d916b2c6f7201253da
- SHA256
  
  b0b3774310059a437d23deed21beada60b5c119587c9c3fcab010218905c15f7
- SHA512
  
  8f732dea05c697b66739146f57a4f29752c612559dc8193a981d657398abc7204f4e91e1e7e2412df26729f1e96cfd2269e7ef0d598cfe4d02a8db2cfdb68f8c
- SSDEEP
  
  196608:TwEKDHCCo5YXc7Y1e00kTKUOU7e7gvo0UakIsp1j:TwVo5X7B0zfOUy0vQh3
Score

7^/10

discovery evasion impact persistence
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Checks if the internet connection is available
  discovery
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
behavioral1 behavioral2
- Target
  
  bdxadsdk.jar
- Size
  
  193KB
- MD5
  
  1526ec33e4c8df4103971b9d652f91cb
- SHA1
  
  dc86db07fd3f5884880fab40da1042e11eac6bc2
- SHA256
  
  e29aeaf797cdb6ae53975a234a2053822db364868205eddd4ff86dddd3fe4e2c
- SHA512
  
  524f2a1d16b2b8112ac4282891add556a0d80166cfbe813d9782f3455b431785622344117e20131f5f73787c6e3862701e4173b4f67ad56ed360589135af781c
- SSDEEP
  
  6144:0f+ySvP+fvJJrLk/T2BC8zFjRmr067fcymDAD91pBbkllZe:DvP+fDrLkyBComrPzczC9Dyjc
Score

1^/10
behavioral3 behavioral4 behavioral5
- Target
  
  dynamic.jar
- Size
  
  77KB
- MD5
  
  79b01642cd37e97bb4bdc559c70d2f24
- SHA1
  
  6432046a8ddac21eb158f382c3200c09e64fddf4
- SHA256
  
  30dc2977fd546fbf324bba7cc218424c2cd1aba0f70783f4a4819984125e2c90
- SHA512
  
  a9fb7274357581ac54c48c22a22db5fd7fd298e32c30f6c0a5461cb65123b13245f6206cd756f80248ee1f9b4c2a1871251dcc62214971bc66a2ad3d66e44d06
- SSDEEP
  
  1536:FOEAI7LwNe++XmZuE+vrnV6tuwtONSaKLR7jPQyBoHBICDxw6:FO0Ie+4mZunvJIVQ8aeRXNBkIiw6
Score

1^/10
behavioral6 behavioral7 behavioral8
- Target
  
  gdtadv2.jar
- Size
  
  230KB
- MD5
  
  33aeb27eefc5ae7838f01186e27d8816
- SHA1
  
  2a7ef64266577916f05cc841c9f977ca8a34568f
- SHA256
  
  c6a8f2838c910a50b56bddad227ebed00b8b32a6869a432c83964b1150ad2c59
- SHA512
  
  ebd8ccc5750aa1c2a28e849149d0ef3d1c997479008a803a931ea10c82bd99d90797a99329690cbea6cbc18d45bbe481a5576abfe3ca8afc96dbb3974a0e00c5
- SSDEEP
  
  6144:B8Obhi9RAdTKqZVGee8QXMLzKb/n4BQk+m:BbhiTAEQeVsWrn4BUm
Score

1^/10
behavioral10 behavioral11 behavioral9

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Download New Code at Runtime

Credential Access

Discovery

Process Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Tasks

static1

behavioral1

discoveryevasionimpactpersistence

behavioral2

discoveryevasionpersistence

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11