1d3b4de60de420b98bc9abf62c1f8d6ce3e7bfc6ef8840bd78eaacf30bb9dcad | Triage

Sharing

General

Target

639330adf8dfdd64234193bbfb4f3267_JaffaCakes118
Size

24.7MB
Sample

240521-rjqr3agg29
MD5

639330adf8dfdd64234193bbfb4f3267
SHA1

e5cfda43a10157d9239a2d56d3d180da0b5c3e15
SHA256

1d3b4de60de420b98bc9abf62c1f8d6ce3e7bfc6ef8840bd78eaacf30bb9dcad
SHA512

bbb8f250fc5fc591d2a97986ef9786e4f09722db2258cda64033761f8ca4232ec05db713df869c4887d0809529014e27c46c950d320c7f9257520c68e547c950
SSDEEP

786432:eqyahRrZj+Y7/6hkDnRIn2H8DuZAkUkunJx:KahRrZKG6hkDnRA2fbM

Score

8^/10

android discovery evasion impact persistence upx

Malware Config

Targets

- Target
  
  639330adf8dfdd64234193bbfb4f3267_JaffaCakes118
- Size
  
  24.7MB
- MD5
  
  639330adf8dfdd64234193bbfb4f3267
- SHA1
  
  e5cfda43a10157d9239a2d56d3d180da0b5c3e15
- SHA256
  
  1d3b4de60de420b98bc9abf62c1f8d6ce3e7bfc6ef8840bd78eaacf30bb9dcad
- SHA512
  
  bbb8f250fc5fc591d2a97986ef9786e4f09722db2258cda64033761f8ca4232ec05db713df869c4887d0809529014e27c46c950d320c7f9257520c68e547c950
- SSDEEP
  
  786432:eqyahRrZj+Y7/6hkDnRIn2H8DuZAkUkunJx:KahRrZKG6hkDnRA2fbM
Score

8^/10

discovery evasion impact persistence
- Checks if the Android device is rooted.
  evasion
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Checks if the internet connection is available
  discovery
behavioral1
- Target
  
  amap_resource1_0_0.png
- Size
  
  24KB
- MD5
  
  94a2a5f84a3fd6f0fd9134708ae1b81e
- SHA1
  
  1e21afaa48ed86cb31aaf7b17c3514315364cc99
- SHA256
  
  fc0c21884d4edfa4d93282139a309f204b27271a111a5b158edbc048f730b461
- SHA512
  
  24a175d15cb5cf8d23f0d53b004ed5c9a47646129c816fcae1b46aedabd95bb2c6dd2958d39d6f98f36dec3cd55d6af2d9b8f7013ced4b37a30db566e9a44923
- SSDEEP
  
  384:SevEWnTSCwukBdJ4dVCHyP7MPi3oqYXgnJk:3vEWnSue4+Sf3opQa
Score

1^/10
behavioral2 behavioral3 behavioral4
- Target
  
  autonavi_Resource1_1_0.png
- Size
  
  1.0MB
- MD5
  
  28ced8cc1c271f803adb227fcd453d49
- SHA1
  
  2c678a0eba7858dc0f012a7143156d1c3847b2b8
- SHA256
  
  2951ad3b05eacec2e0c3c886940d26234a8dc30bdd620ba2ac34c53eb4a863d0
- SHA512
  
  59c802fce67e57fe8f37cd2c632b19bf89278b5f08cc83c2f32e099c5103b2ded58fdff0951b3a6847c571987fa8d40b4dcb7a2a65ece07d292b710a5308cfc8
- SSDEEP
  
  12288:6koWXv0aNOpoCrQPkJMWkZ6Ncplr8HQ8IbmP/vT:TvXHOiW3CDOcplr3LiPD
Score

1^/10
behavioral5 behavioral6 behavioral7

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Tasks

static1

behavioral1

discoveryevasionimpactpersistence

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7