5dfc6e5d74d73582a93fe20e2d66e8f2c9cb572ac51f80e3b74dde448b29824b | Triage

Submit
Reports

Overview

overview

8

Static

static

6

630f4cf1ce...18.apk

android-9-x86

8

630f4cf1ce...18.apk

android-10-x64

8

630f4cf1ce...18.apk

android-11-x64

8

Sharing

General

Target

630f4cf1ce4292e41f2b2bbcc95ca0d1_JaffaCakes118
Size

2.6MB
Sample

240521-m4qwcabb51
MD5

630f4cf1ce4292e41f2b2bbcc95ca0d1
SHA1

c1b82ab2db553a7b17993a6e1f00cae7d9855765
SHA256

5dfc6e5d74d73582a93fe20e2d66e8f2c9cb572ac51f80e3b74dde448b29824b
SHA512

eb6781b994157e83e19d71d5b649a83beb03eb8d73905bd22fd33ae240754f775fde22fd4d1fd8993a83cd17321e1f6c6c11e2250f4091a4c080d631e186f912
SSDEEP

49152:RjCLZwnbIdDr/ZovZVPadP3vhb5ZtN/AhprQy/tLqFQYQcbegf6mJNZ:R9bdvZ5adP3vhbr/Hu1qFQYZCeNZ

Score

8^/10

android discovery evasion impact privilege_escalation stealth trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

630f4cf1ce4292e41f2b2bbcc95ca0d1_JaffaCakes118.apk

Resource

android-x86-arm-20240514-en

discovery evasion impact privilege_escalation stealth trojan

android-9-x86

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

630f4cf1ce4292e41f2b2bbcc95ca0d1_JaffaCakes118.apk

Resource

android-x64-20240514-en

discovery evasion stealth trojan

android-10-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

630f4cf1ce4292e41f2b2bbcc95ca0d1_JaffaCakes118.apk

Resource

android-x64-arm64-20240514-en

discovery evasion impact privilege_escalation stealth trojan

android-11-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  630f4cf1ce4292e41f2b2bbcc95ca0d1_JaffaCakes118
- Size
  
  2.6MB
- MD5
  
  630f4cf1ce4292e41f2b2bbcc95ca0d1
- SHA1
  
  c1b82ab2db553a7b17993a6e1f00cae7d9855765
- SHA256
  
  5dfc6e5d74d73582a93fe20e2d66e8f2c9cb572ac51f80e3b74dde448b29824b
- SHA512
  
  eb6781b994157e83e19d71d5b649a83beb03eb8d73905bd22fd33ae240754f775fde22fd4d1fd8993a83cd17321e1f6c6c11e2250f4091a4c080d631e186f912
- SSDEEP
  
  49152:RjCLZwnbIdDr/ZovZVPadP3vhb5ZtN/AhprQy/tLqFQYQcbegf6mJNZ:R9bdvZ5adP3vhbr/Hu1qFQYZCeNZ
Score

8^/10

discovery evasion impact privilege_escalation stealth trojan
- Removes its main activity from the application launcher
  stealth trojan evasion
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Tries to add a device administrator.
  privilege_escalation impact
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
- Reads information about phone network operator.
  discovery
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

discoveryevasionimpactprivilege_escalationstealthtrojan

behavioral2

discoveryevasionstealthtrojan

behavioral3

discoveryevasionimpactprivilege_escalationstealthtrojan

© 2018-2024

Terms | Privacy