680d4e83295bb7587aa4516f712adc56f361ddac9324eb7ddb8e72d2cf376467 | Triage

Sharing

General

Target

68ef219c8c132b9df1182d9db75b8d25_JaffaCakes118
Size

21.8MB
Sample

240522-2zcv9acc8y
MD5

68ef219c8c132b9df1182d9db75b8d25
SHA1

6fa27572886d4d405c92ea7ae34cd19bd134f201
SHA256

680d4e83295bb7587aa4516f712adc56f361ddac9324eb7ddb8e72d2cf376467
SHA512

dcea925c8314d169d32b38b14b0df3bb3393e1c533ea76eeeac16bc676884f16d7f38d3cad05a35d732d1e2514b63e0fd6531701fccb21344b24dc66ce759134
SSDEEP

393216:W2DSZ9u9O4X9uGtUNCK54bOZkLx0hb2fHxF4096Q46BJJjbuQbF0EtfK3/sKH7mP:WWfc4X9uGtUXzset2fHP40974651BGHw

Score

7^/10

android discovery evasion impact persistence

Malware Config

Targets

- Target
  
  68ef219c8c132b9df1182d9db75b8d25_JaffaCakes118
- Size
  
  21.8MB
- MD5
  
  68ef219c8c132b9df1182d9db75b8d25
- SHA1
  
  6fa27572886d4d405c92ea7ae34cd19bd134f201
- SHA256
  
  680d4e83295bb7587aa4516f712adc56f361ddac9324eb7ddb8e72d2cf376467
- SHA512
  
  dcea925c8314d169d32b38b14b0df3bb3393e1c533ea76eeeac16bc676884f16d7f38d3cad05a35d732d1e2514b63e0fd6531701fccb21344b24dc66ce759134
- SSDEEP
  
  393216:W2DSZ9u9O4X9uGtUNCK54bOZkLx0hb2fHxF4096Q46BJJjbuQbF0EtfK3/sKH7mP:WWfc4X9uGtUXzset2fHP40974651BGHw
Score

7^/10

discovery evasion impact persistence
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Acquires the wake lock
- Checks if the internet connection is available
  discovery
- Requests dangerous framework permissions
behavioral1 behavioral2
- Target
  
  AdServer.apk
- Size
  
  1.1MB
- MD5
  
  73c2ac27961b9db4274ca13a178c0fa2
- SHA1
  
  3d1b1a8f6c9bc63fc88068c71e98bbe70797d03e
- SHA256
  
  751012d560a3c16a6f377f403ea12b9c6805a279d84c08210f9a5543c5bef42e
- SHA512
  
  591bf3bd1316189616aed273c5bdcb49ed1c46fc7bdf6ee1db9ce11b317dbfda5477989cc3ceafaa2e02dc6555afa1ac4ba872ea27d9a8ae9b5a9ac3abadcef8
- SSDEEP
  
  24576:ceJTiQnLEw7efCr8vTbmTttkKilyMtnqjAysPf0+fm4Hfr:D4w7ear830tup4anq9a3m4HD
Score

1^/10
behavioral3
- Target
  
  analytics_core.apk
- Size
  
  159KB
- MD5
  
  d2e90bb505f20fc73baf25805b0273aa
- SHA1
  
  240fbbfda194a65761baed6f3546bc4c744a1850
- SHA256
  
  77060ad812f5e6e9e896c39bc548f8295238eaa9941e1986e8e024e7d2114309
- SHA512
  
  c2ef3f79b6cfb171b0904ff8138238cbf985344d91d6d9ec35472d14233d1b108cc0234259e8286cbb099747cc8d9d2f74c8c7394ab3a6dcfc2cc95e168c8c85
- SSDEEP
  
  3072:/vnDHScqJUCqi8p27PhJkqOjvxSWnNoPuKAaSWk8V4rpCPd7H7sl3eX0emR7KDD:7ScaCioePDaZdnNdFDJCPJoKvmtiD
Score

1^/10
behavioral4

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Download New Code at Runtime

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Tasks

static1

behavioral1

discoveryevasionimpactpersistence

behavioral2

discoveryevasion

behavioral3

behavioral4