af3d873266dabd5f8544006b2e51cb9d4948761019ef0b56ae96b020d35b0d34 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e9d52ebc08775652e8e220b72924e6e_JaffaCakes118
Size

31.8MB
Sample

240520-mlsl8agc7w
MD5

5e9d52ebc08775652e8e220b72924e6e
SHA1

d30d8355c9054ae790fcfda301ebf7f3ed0fab26
SHA256

af3d873266dabd5f8544006b2e51cb9d4948761019ef0b56ae96b020d35b0d34
SHA512

9c4d3009f3f54f2dd9c4af2cdc2b915487a85bc991bcb4378cb6d9ba17cd709efa4092509c62330c5c4ed0bc284c626d08e94f27f79079ae0091d0a1d6c36e78
SSDEEP

786432:HsOFoxZLRQgyC6CP6qPonH4e+/SUYJwOUm8h8Gj1:HsOFoxZ1QgyC6CeYe72m8hv1

Score

7^/10

android discovery evasion

Malware Config

Targets

- Target
  
  5e9d52ebc08775652e8e220b72924e6e_JaffaCakes118
- Size
  
  31.8MB
- MD5
  
  5e9d52ebc08775652e8e220b72924e6e
- SHA1
  
  d30d8355c9054ae790fcfda301ebf7f3ed0fab26
- SHA256
  
  af3d873266dabd5f8544006b2e51cb9d4948761019ef0b56ae96b020d35b0d34
- SHA512
  
  9c4d3009f3f54f2dd9c4af2cdc2b915487a85bc991bcb4378cb6d9ba17cd709efa4092509c62330c5c4ed0bc284c626d08e94f27f79079ae0091d0a1d6c36e78
- SSDEEP
  
  786432:HsOFoxZLRQgyC6CP6qPonH4e+/SUYJwOUm8h8Gj1:HsOFoxZ1QgyC6CeYe72m8hv1
Score

7^/10

discovery evasion
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Checks if the internet connection is available
  discovery
- Reads information about phone network operator.
  discovery
behavioral1

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion