7cead4fca3e6063f8fd7e5589e4ff9ee999c9aa89863db48c809c1c00dd13bff | Triage

Sharing

General

Target

65e2e9bffc2cd5f3e62b18b6449c9141_JaffaCakes118
Size

25.4MB
Sample

240522-d9hmgsba8v
MD5

65e2e9bffc2cd5f3e62b18b6449c9141
SHA1

98630c3bb3e168a0f7044e8c05764a3cedd94321
SHA256

7cead4fca3e6063f8fd7e5589e4ff9ee999c9aa89863db48c809c1c00dd13bff
SHA512

8560bd2a2c73400d980b4ae3ef956b9aeabba22122e86460abaaf6e5c610aeec99bfd35d0f3f17dcd986b868c60b015394d136dd3aa01299deb867a4dee6d6e1
SSDEEP

786432:qIQsTc7pSfUrzBeIvs9zvYxDmPytlE4parjz2jkHC:91wJr1eqOuDmJJHnHC

Score

8^/10

android collection discovery evasion

Malware Config

Targets

- Target
  
  65e2e9bffc2cd5f3e62b18b6449c9141_JaffaCakes118
- Size
  
  25.4MB
- MD5
  
  65e2e9bffc2cd5f3e62b18b6449c9141
- SHA1
  
  98630c3bb3e168a0f7044e8c05764a3cedd94321
- SHA256
  
  7cead4fca3e6063f8fd7e5589e4ff9ee999c9aa89863db48c809c1c00dd13bff
- SHA512
  
  8560bd2a2c73400d980b4ae3ef956b9aeabba22122e86460abaaf6e5c610aeec99bfd35d0f3f17dcd986b868c60b015394d136dd3aa01299deb867a4dee6d6e1
- SSDEEP
  
  786432:qIQsTc7pSfUrzBeIvs9zvYxDmPytlE4parjz2jkHC:91wJr1eqOuDmJJHnHC
Score

8^/10

collection discovery evasion
- Requests cell location
  Uses Android APIs to to get current cell location.
  collection discovery evasion
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Checks if the internet connection is available
  discovery
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
- Reads information about phone network operator.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Execution Guardrails

Geofencing

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

Location Tracking

Process Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Location Tracking

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

collectiondiscoveryevasion

behavioral2

discoveryevasion