irata | 7b5a4d4b175ad448f2559b461072d9efae64a77036b38694567b254694cdab62 | Triage

Sharing

General

Target

41ccd6db9b33c7da2c9d985337163c7e_JaffaCakes118
Size

17.6MB
Sample

240514-rmtm5aag85
MD5

41ccd6db9b33c7da2c9d985337163c7e
SHA1

98800602d7f52f0b07f2a23d2964906f7a8c6549
SHA256

7b5a4d4b175ad448f2559b461072d9efae64a77036b38694567b254694cdab62
SHA512

6da29434d21e8398dc6b169469346df4560c5c69ed9a904e596c9c2fc17e3292242467a314ea9bac5ac26d8d6e47c189e79f6f503a6250d04ec8c1a934c41ab7
SSDEEP

393216:V8DdmIIM47vDWzIjnm0R8edXY8DdmIIM47vDWzIjnm0R8edXe:VssIIMUDWcjmydXYssIIMUDWcjmydXe

Score

10^/10

irata android discovery evasion persistence

Malware Config

Targets

- Target
  
  41ccd6db9b33c7da2c9d985337163c7e_JaffaCakes118
- Size
  
  17.6MB
- MD5
  
  41ccd6db9b33c7da2c9d985337163c7e
- SHA1
  
  98800602d7f52f0b07f2a23d2964906f7a8c6549
- SHA256
  
  7b5a4d4b175ad448f2559b461072d9efae64a77036b38694567b254694cdab62
- SHA512
  
  6da29434d21e8398dc6b169469346df4560c5c69ed9a904e596c9c2fc17e3292242467a314ea9bac5ac26d8d6e47c189e79f6f503a6250d04ec8c1a934c41ab7
- SSDEEP
  
  393216:V8DdmIIM47vDWzIjnm0R8edXY8DdmIIM47vDWzIjnm0R8edXe:VssIIMUDWcjmydXYssIIMUDWcjmydXe
Score

7^/10

discovery evasion persistence
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Queries the mobile country code (MCC)
  discovery
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
behavioral1

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence