4390e02baca09c05df82cf4958bd3f47c2d20005881642f5b19be2bc6af2bdbd | Triage

Sharing

General

Target

64732b9f45bfe2522edccabd92bf71ba_JaffaCakes118
Size

16.2MB
Sample

240521-xyk31sff2t
MD5

64732b9f45bfe2522edccabd92bf71ba
SHA1

310751c5baf88cfe21079c39a76312f20eb3f170
SHA256

4390e02baca09c05df82cf4958bd3f47c2d20005881642f5b19be2bc6af2bdbd
SHA512

4e671471632daf453c51413251174ce6adb3822d326e00e1dd0a876f8889cf4b14e793a20e1309014e29d8bc279ae9491bb0b25a0399cec2402ce9772e5044ed
SSDEEP

393216:mQSRq1TwQkwPZK6Vupr5GG2xRG3PHUXgFYmtNGIZv580DVV01Nq:mDIUlo6/HUXgGmTG+v5Z

Score

8^/10

android discovery evasion impact persistence

Malware Config

Targets

- Target
  
  64732b9f45bfe2522edccabd92bf71ba_JaffaCakes118
- Size
  
  16.2MB
- MD5
  
  64732b9f45bfe2522edccabd92bf71ba
- SHA1
  
  310751c5baf88cfe21079c39a76312f20eb3f170
- SHA256
  
  4390e02baca09c05df82cf4958bd3f47c2d20005881642f5b19be2bc6af2bdbd
- SHA512
  
  4e671471632daf453c51413251174ce6adb3822d326e00e1dd0a876f8889cf4b14e793a20e1309014e29d8bc279ae9491bb0b25a0399cec2402ce9772e5044ed
- SSDEEP
  
  393216:mQSRq1TwQkwPZK6Vupr5GG2xRG3PHUXgFYmtNGIZv580DVV01Nq:mDIUlo6/HUXgGmTG+v5Z
Score

8^/10

discovery evasion impact persistence
- Checks if the Android device is rooted.
  evasion
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Checks if the internet connection is available
  discovery
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
behavioral1 behavioral2
- Target
  
  legudzbait
- Size
  
  635B
- MD5
  
  0ee1021770f329cee97a9b06ae90759d
- SHA1
  
  b76ded8bb3b5e61b8d7fce150132449639ec8278
- SHA256
  
  fb665a1276fb0a1770329979783ace34094424d19dd966f459489845851b6ca1
- SHA512
  
  dfbd70a1e81caf58389eeea70bdd460c60eb97273a9b8b68bda7eb276502e427201800e84b036a6d48e20fd176860c102dc6e148e601cfacb6f9994b7c3a1eac
Score

1^/10
behavioral3 behavioral4 behavioral5

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Tasks

static1

behavioral1

discoveryevasionimpactpersistence

behavioral2

discoveryevasionimpactpersistence

behavioral3

behavioral4

behavioral5