84563532e8b068fd81f84d63e644c13073a6c54ac9118e52a65da8b6d72cf40d | Triage

Sharing

General

Target

6634184808e49350c69a75a7edccd708_JaffaCakes118
Size

7.8MB
Sample

240522-gfr6lsea4z
MD5

6634184808e49350c69a75a7edccd708
SHA1

f2b8fae2367001ad33e4ab6f265fff96ef2a748b
SHA256

84563532e8b068fd81f84d63e644c13073a6c54ac9118e52a65da8b6d72cf40d
SHA512

e99c07025e6e26a7564a1fe0152fc34fa2cc19788eb6433e6e8d7781648c00d4473fb68eff04f730e849fb65aa65df7aa315b9247ebcfbfd670b89108a6055cf
SSDEEP

196608:c8uMSvyrZvZbcXhUyGgffcdbL5fDYc2aQpxqICOsVxK:c8uMFrZvZbcX26cfUc2aQpxqIsU

Score

7^/10

android discovery evasion persistence

Malware Config

Targets

- Target
  
  6634184808e49350c69a75a7edccd708_JaffaCakes118
- Size
  
  7.8MB
- MD5
  
  6634184808e49350c69a75a7edccd708
- SHA1
  
  f2b8fae2367001ad33e4ab6f265fff96ef2a748b
- SHA256
  
  84563532e8b068fd81f84d63e644c13073a6c54ac9118e52a65da8b6d72cf40d
- SHA512
  
  e99c07025e6e26a7564a1fe0152fc34fa2cc19788eb6433e6e8d7781648c00d4473fb68eff04f730e849fb65aa65df7aa315b9247ebcfbfd670b89108a6055cf
- SSDEEP
  
  196608:c8uMSvyrZvZbcXhUyGgffcdbL5fDYc2aQpxqICOsVxK:c8uMFrZvZbcX26cfUc2aQpxqIsU
Score

7^/10

discovery evasion persistence
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Checks if the internet connection is available
  discovery
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence

behavioral3

discoveryevasion