e704a5d7af6d728db7d2488b249ba01796bff69aa45984fa972acb2416b9a81a | Triage

Sharing

General

Target

47a4a3ad5150b59e8c1a9c85d33c5a29_JaffaCakes118
Size

2.0MB
Sample

240515-x1xvlaga56
MD5

47a4a3ad5150b59e8c1a9c85d33c5a29
SHA1

9c5028c7a788a2b3822df883b586cf694d6f2b92
SHA256

e704a5d7af6d728db7d2488b249ba01796bff69aa45984fa972acb2416b9a81a
SHA512

1a3b227b4eaf50c8cccd95c5b47810ff53ee0dc99d776ee895034810e1dccf1be4e11f1d2cc836139b28b3be5791fea3083cd95373a9fb222a705cb406227b29
SSDEEP

49152:rd2A7z0MPsWBTjOh8yAobZhfpu6YT7BV08QS:rFz0M1jQ8UZynPBV06

Score

7^/10

android discovery evasion persistence

Malware Config

Targets

- Target
  
  47a4a3ad5150b59e8c1a9c85d33c5a29_JaffaCakes118
- Size
  
  2.0MB
- MD5
  
  47a4a3ad5150b59e8c1a9c85d33c5a29
- SHA1
  
  9c5028c7a788a2b3822df883b586cf694d6f2b92
- SHA256
  
  e704a5d7af6d728db7d2488b249ba01796bff69aa45984fa972acb2416b9a81a
- SHA512
  
  1a3b227b4eaf50c8cccd95c5b47810ff53ee0dc99d776ee895034810e1dccf1be4e11f1d2cc836139b28b3be5791fea3083cd95373a9fb222a705cb406227b29
- SSDEEP
  
  49152:rd2A7z0MPsWBTjOh8yAobZhfpu6YT7BV08QS:rFz0M1jQ8UZynPBV06
Score

7^/10

discovery evasion persistence
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Checks if the internet connection is available
  discovery
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Download New Code at Runtime

Credential Access

Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence

behavioral3

discoveryevasion