19c803e9020203448827593d02e8169e279f74af935a82f0e0f7b7f5efab5398

General

Target

69a6ad12c6c333caf3308096c67186c7_JaffaCakes118
Size

4.7MB
Sample

240523-eg9e6sda6y
MD5

69a6ad12c6c333caf3308096c67186c7
SHA1

34e6ec659550c4a0f37137282d233a80816646ba
SHA256

19c803e9020203448827593d02e8169e279f74af935a82f0e0f7b7f5efab5398
SHA512

3919211d855939b91c51c8903d08fb198d89d4bfca67ca3089fc7c2752a55dce7a7379cc1d0571ebdfa8df9ba343b6a47cab77f208164a67f42947be5869576b
SSDEEP

98304:0Zur+4alJ23/9Rr9EIur/EykK1JIbUEcoroBVy4Kvsc4fnJmSOErWnqyAQfCrY:ceWs31RmLPfalcwSZc4fnJmSzrWjq0

Score

8^/10

Malware Config

Targets

- Target
  
  69a6ad12c6c333caf3308096c67186c7_JaffaCakes118
- Size
  
  4.7MB
- MD5
  
  69a6ad12c6c333caf3308096c67186c7
- SHA1
  
  34e6ec659550c4a0f37137282d233a80816646ba
- SHA256
  
  19c803e9020203448827593d02e8169e279f74af935a82f0e0f7b7f5efab5398
- SHA512
  
  3919211d855939b91c51c8903d08fb198d89d4bfca67ca3089fc7c2752a55dce7a7379cc1d0571ebdfa8df9ba343b6a47cab77f208164a67f42947be5869576b
- SSDEEP
  
  98304:0Zur+4alJ23/9Rr9EIur/EykK1JIbUEcoroBVy4Kvsc4fnJmSOErWnqyAQfCrY:ceWs31RmLPfalcwSZc4fnJmSzrWjq0
Score

8^/10

discovery evasion impact persistence
- Checks if the Android device is rooted.
  evasion
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  evasion persistence
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries the mobile country code (MCC)
  discovery
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Checks if the internet connection is available
  discovery
- Reads information about phone network operator.
  discovery
behavioral1
- Target
  
  WeChatPlugLogin_2017032801.apk
- Size
  
  1.2MB
- MD5
  
  de80306985a08a958e1ddd951d838fc8
- SHA1
  
  ce072bb171f1804a8a170593f3f276ac6818dbea
- SHA256
  
  9ab5becdd3deefcf5ab9bcce7d9e1d29811fa38ffe239dcc431cade361242bca
- SHA512
  
  1291cc8e58d34bf25fa7ec63e993dc4bb9775e7bce43439e33526a21eed17df95066695baf1f11b53b16b79742d0505d843f547dc26acf841ecfdcbadf76caf0
- SSDEEP
  
  24576:/4l5vmR29zyPmO3GNDxlzM4XMlHagq9VHExgiUVJxvWjj31K62:/m4MxyPmh1lzM48lH/iDiUVJRsL1KT
Score

1^/10
behavioral2 behavioral3 behavioral4

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

Checks if the Android device is rooted.

Checks CPU information

Checks memory information

Makes use of the framework's foreground persistence service

Queries information about the current Wi-Fi connection

Queries the mobile country code (MCC)

Queries the phone number (MSISDN for GSM devices)

Registers a broadcast receiver at runtime (usually for listening for system events)

Checks if the internet connection is available

Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4