0a5dcd0a623e876873898707d3272d2e06ac6cf0b67182fc6b9f7699cb5780fd | Triage

Sharing

General

Target

66d20f5f22900e72a8f3baf153b9d68b_JaffaCakes118
Size

6.9MB
Sample

240522-lmqzcaag84
MD5

66d20f5f22900e72a8f3baf153b9d68b
SHA1

2a8bec892216db5a67b701fb77a5c19f46c7cc6c
SHA256

0a5dcd0a623e876873898707d3272d2e06ac6cf0b67182fc6b9f7699cb5780fd
SHA512

f060576e2c1aa544b0a3776a8e4b07f7c7a2caff54c9e5b00bfe147fa7361870f2db4d56b6a1eeb48192a339c016164e762d3d45736330b1b0507d7c01db3e54
SSDEEP

196608:fb+6Ud1VwgcSN3TmFu8MIF/g3UlSdQAOemxxWSPPGt:8jFN36Fu8MS/0MSGLekWSPPGt

Score

7^/10

android discovery evasion

Malware Config

Targets

- Target
  
  66d20f5f22900e72a8f3baf153b9d68b_JaffaCakes118
- Size
  
  6.9MB
- MD5
  
  66d20f5f22900e72a8f3baf153b9d68b
- SHA1
  
  2a8bec892216db5a67b701fb77a5c19f46c7cc6c
- SHA256
  
  0a5dcd0a623e876873898707d3272d2e06ac6cf0b67182fc6b9f7699cb5780fd
- SHA512
  
  f060576e2c1aa544b0a3776a8e4b07f7c7a2caff54c9e5b00bfe147fa7361870f2db4d56b6a1eeb48192a339c016164e762d3d45736330b1b0507d7c01db3e54
- SSDEEP
  
  196608:fb+6Ud1VwgcSN3TmFu8MIF/g3UlSdQAOemxxWSPPGt:8jFN36Fu8MS/0MSGLekWSPPGt
Score

7^/10

discovery evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries the mobile country code (MCC)
  discovery
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Checks if the internet connection is available
  discovery
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
- Reads information about phone network operator.
  discovery
behavioral1
- Target
  
  ysdk_hackdex.jar
- Size
  
  1KB
- MD5
  
  d428e23060b3b30cd1926a33a17f96a4
- SHA1
  
  37eb661405ebe0cad99e83ed625cf2bc2e1ae612
- SHA256
  
  1f88fdf320cae29d1fd7c639b09ce4d4b468e349cd8bc71376d7c928ffa66f6a
- SHA512
  
  daac098768844f55ee1528f40b334b50928ad1862b948a5c942338a36c7cfd947356bbe605bd554e9ac85c00f6a39022c30374625311ce17c36734e291daf2db
Score

1^/10
behavioral2 behavioral3 behavioral4

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

Credential Access

Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion

behavioral2

behavioral3

behavioral4