b56f1d86a468e54d16c5d53d06a31bcc9bd769ecb62ad7d697245e9ade017169 | Triage

Sharing

General

Target

6479f352e9d328d019d8124e698f1cf7_JaffaCakes118
Size

4.5MB
Sample

240521-x4z45afg96
MD5

6479f352e9d328d019d8124e698f1cf7
SHA1

39bb2c6932bbc1cf98b626d9d27fcb61bff3d3f5
SHA256

b56f1d86a468e54d16c5d53d06a31bcc9bd769ecb62ad7d697245e9ade017169
SHA512

8f364995c9971db592de6f787790e782864a47dad874b7a7f93de36fc1bf1e40dd51d62c03c519494e80b13213909296f11a66802272419dcaef06c3fc1c0a3c
SSDEEP

98304:eUNvC81msW+FsUqabIfvRGN1IrExZb93a5cofMrqavt2hYW0RhUA0G:9vCGmP+FWawazb5qcocv0hYZRSAh

Score

8^/10

android discovery evasion impact persistence

Malware Config

Targets

- Target
  
  6479f352e9d328d019d8124e698f1cf7_JaffaCakes118
- Size
  
  4.5MB
- MD5
  
  6479f352e9d328d019d8124e698f1cf7
- SHA1
  
  39bb2c6932bbc1cf98b626d9d27fcb61bff3d3f5
- SHA256
  
  b56f1d86a468e54d16c5d53d06a31bcc9bd769ecb62ad7d697245e9ade017169
- SHA512
  
  8f364995c9971db592de6f787790e782864a47dad874b7a7f93de36fc1bf1e40dd51d62c03c519494e80b13213909296f11a66802272419dcaef06c3fc1c0a3c
- SSDEEP
  
  98304:eUNvC81msW+FsUqabIfvRGN1IrExZb93a5cofMrqavt2hYW0RhUA0G:9vCGmP+FWawazb5qcocv0hYZRSAh
Score

8^/10

discovery evasion impact persistence
- Checks if the Android device is rooted.
  evasion
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Checks if the internet connection is available
  discovery
behavioral1
- Target
  
  gdtadv2.jar
- Size
  
  230KB
- MD5
  
  33aeb27eefc5ae7838f01186e27d8816
- SHA1
  
  2a7ef64266577916f05cc841c9f977ca8a34568f
- SHA256
  
  c6a8f2838c910a50b56bddad227ebed00b8b32a6869a432c83964b1150ad2c59
- SHA512
  
  ebd8ccc5750aa1c2a28e849149d0ef3d1c997479008a803a931ea10c82bd99d90797a99329690cbea6cbc18d45bbe481a5576abfe3ca8afc96dbb3974a0e00c5
- SSDEEP
  
  6144:B8Obhi9RAdTKqZVGee8QXMLzKb/n4BQk+m:BbhiTAEQeVsWrn4BUm
Score

1^/10
behavioral2 behavioral3 behavioral4

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Tasks

static1

behavioral1

discoveryevasionimpactpersistence

behavioral2

behavioral3

behavioral4