35e9bb2918ae921ccb0cad71ec87924f73a951495fde0236a741edbc12808381 | Triage

Sharing

General

Target

68da3cc1f654e62206df61efd6de759b_JaffaCakes118
Size

12.9MB
Sample

240522-2d36babc7z
MD5

68da3cc1f654e62206df61efd6de759b
SHA1

ed5f05c021508f4cd9460cac3efd4d9aaf43c7d8
SHA256

35e9bb2918ae921ccb0cad71ec87924f73a951495fde0236a741edbc12808381
SHA512

f756f67f99d0ca16e10a51e7352ae381675714dc23e035aed3e71d8ae748d94b2f2970b0ef749123bbd575621760218ad8f0408d56168f5cfa9b253ebce22cb0
SSDEEP

393216:k7DtZpIWM830d1IVxPh6A9FXP6cGNVHrbI0oKuLp9o:k7pZptKIVn9F/6cGeW

Score

7^/10

android discovery evasion impact

Malware Config

Targets

- Target
  
  68da3cc1f654e62206df61efd6de759b_JaffaCakes118
- Size
  
  12.9MB
- MD5
  
  68da3cc1f654e62206df61efd6de759b
- SHA1
  
  ed5f05c021508f4cd9460cac3efd4d9aaf43c7d8
- SHA256
  
  35e9bb2918ae921ccb0cad71ec87924f73a951495fde0236a741edbc12808381
- SHA512
  
  f756f67f99d0ca16e10a51e7352ae381675714dc23e035aed3e71d8ae748d94b2f2970b0ef749123bbd575621760218ad8f0408d56168f5cfa9b253ebce22cb0
- SSDEEP
  
  393216:k7DtZpIWM830d1IVxPh6A9FXP6cGNVHrbI0oKuLp9o:k7pZptKIVn9F/6cGeW
Score

1^/10
behavioral1 behavioral2
- Target
  
  com.qihoo.appstore.pay.lite.apk
- Size
  
  260KB
- MD5
  
  2440eb04289baccc027a4ec684d2a14e
- SHA1
  
  4727a55de77c8e779849f6976084c4fa8ace3830
- SHA256
  
  fd1fa6bda15e3145f109a643032a43c6d6f0576e2827d15685c934b82e2137b2
- SHA512
  
  c09a345d9aaeae7298ca4a0b8533627b4d9d652212b5e76a37a09db3cafa29e3c7163c4e0fbd4f05ba03a781a6f7037609fd77c1bc03cff69cd4dc33a0a37719
- SSDEEP
  
  6144:garGZOh0LeG1d3rUjjCXf7FyZwRMWgigaHjUNA2OcMMmIWmKVQlQ:gYADd3rMWinWgi1INyNMcmo
Score

7^/10

discovery evasion impact
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
behavioral3 behavioral4
- Target
  
  com.qihoo360.mobilesafe.appwatcher.apk
- Size
  
  57KB
- MD5
  
  1ae1ae9f97b5809dd8456878f0cf28dd
- SHA1
  
  69278f2a15e9c7e01b6639bbc997716bbde307dc
- SHA256
  
  5b586de6ee4db4bce5f3f0c56511c726fb7deb3ea0db83c33e83ccbc60842c5c
- SHA512
  
  f6c350053047a594204a23b5ef69d5c0d03723a3c2f819c53b87c52cea0e0e19c5a776a089bd5e639107c0ef51c00962fa2341cc63ed7a125b2f87e667d6a965
- SSDEEP
  
  1536:7+0YY5B84TGCraiSVfPjcfbt1Cw2o0pkJZ7USIYo9vylwh:7+SBVzGS72uZ7nxqh
Score

1^/10
behavioral5 behavioral6 behavioral7
- Target
  
  com.qihoo360.mobilesafe.chargescreensvc.apk
- Size
  
  144KB
- MD5
  
  99d27a2d07f1b1719c5c7f18095aecc5
- SHA1
  
  5193201253570d06c00b499b5f2038fbf23e44e1
- SHA256
  
  9a33aeaf00360e8bae48ed7c7bc114ddd8b6b875cec3ff4c25d5603f8177cf57
- SHA512
  
  c2b7d27f7ba460d38b2d1d413d5bc5516256dc437243f56d798746a1f8c91ce9f78d0b06bb71c7766f352cee4642af48b8fcb2b486fdc09fb87c717ff01f3390
- SSDEEP
  
  3072:p6UEx8KSrRx7X9PbgsoPZJInCUMDog6kXrcqZWA8u1N9Ph0WCl7IM6wD:pDEurT7X9TgTJInNMDog6kX9Kudh8IM7
Score

1^/10
behavioral10 behavioral8 behavioral9
- Target
  
  com.qihoo360.mobilesafe.homepage.apk
- Size
  
  1.4MB
- MD5
  
  d8a07e15de4a63978516f711e5c2aca6
- SHA1
  
  6f9f30d9c35a89bed62a11bad356f712da9ab556
- SHA256
  
  cc54f878ec098e8cb1e6b394eb6be8dd26849fe6b2827b1bbd62e5cb58341c4d
- SHA512
  
  b8a6a4b678b7fd392d681f978396d17db04af5d171c0cd19f4e04a26203fa8de9d041533f5c686db5008e7793f296ba421f3bdb954a7e047829846c39bb383b4
- SSDEEP
  
  24576:zdIj2qmS046KVL3WqPY7VgXX26yx/TQh64Zfqj2g+bi7ATT9i89Wton:5IjBm5ZKUAYo26ydcVG+bi7sM52
Score

1^/10
behavioral11 behavioral12 behavioral13
- Target
  
  com.qihoo360.mobilesafe.recommend.apk
- Size
  
  2.3MB
- MD5
  
  a974b37cb9f9cd479c7ec8f431e153a9
- SHA1
  
  5623f9461ca41fbb533d03d86842589bb2d22b9d
- SHA256
  
  ea1a64bab8e1a32da862584032e1c22f126c9c9e87861d6e7f58b9369436fd87
- SHA512
  
  e0568d91ecbdb4d917cd2cefff739f102d0f1da223aea20dd2e3f94a328e33a443a7a6f1473a51aacb9d06a1131c103e0fa271e4b3844216305fd344b6bc6f55
- SSDEEP
  
  49152:PleDIPflVMTWEuIfaPDY5MljpQ5T8eXsotXfWP10KG6X:PlzP/MTSIQU5upQp8zuvWPyKGI
Score

1^/10
behavioral14 behavioral15 behavioral16
- Target
  
  dmss_v2.jar
- Size
  
  126KB
- MD5
  
  aa64c54de3204df266353f78f8f92743
- SHA1
  
  f30391c3c576f3ad05cae309d4b3ed63759f140f
- SHA256
  
  a9d07897e42c42c15f27ac1e3a907072bce90aeed7cf70ad3c52ea020a2bb1ac
- SHA512
  
  a3be909d084d88dc1da4c0b0fd8dfbcc63d3149308f622b094fb1b9b4a47c2e5fe9633fd7354e2ce281d222fffcfdfd3896708cb398c81f12437aa8f0720690c
- SSDEEP
  
  3072:QWDEMmwiLvzgsHGEIqTriwmelZLoALvFchukchKC+8G/ee:pDpmwiJ2Ur7mhAL+kkcPG1
Score

1^/10
behavioral17 behavioral18 behavioral19
- Target
  
  tcore.jar
- Size
  
  153KB
- MD5
  
  bc3cb0eef1d19c47cf3f1a2211258aee
- SHA1
  
  7f10b763a43b6900cd9925b014c1a794994d37dd
- SHA256
  
  79e1eee2d72cb40e0c931ed08e609891a41b0a2802d6e0b98abd7970238b4eee
- SHA512
  
  51f66294dbc34d4c618e2b16449c47f73734f1d5a57d2e40927ff5ab808604206fda84af29653cb9b018f30749e54a0a481e796cfc7b016a317ff7e83860df86
- SSDEEP
  
  3072:GYRLLNEK/MG/+UL3TMPAi7GGawe/JchKfbNewyfVF4BTP7rLqchL:GYLLNEkMG/+g27GGze/JSi5IuHLBL
Score

1^/10
behavioral20 behavioral21 behavioral22

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

discoveryevasionimpact

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22