8ab82ad1eb3c3dfe4d7d24f67193c4909844b52578c74e62d838d3b8c6c4f425 | Triage

Sharing

General

Target

6a7537bb73569dcfaae7bc63dce1595f_JaffaCakes118
Size

27.0MB
Sample

240523-k8antabf9t
MD5

6a7537bb73569dcfaae7bc63dce1595f
SHA1

6d61c683371e9a593ecd203c7091a2fe6e4243ca
SHA256

8ab82ad1eb3c3dfe4d7d24f67193c4909844b52578c74e62d838d3b8c6c4f425
SHA512

3e3a4a882f77eeb49f3d8922aa8cd7bf6f6aff59192d555bc438f46e76cf9ee4ebaeb8b8955d9d284ee630dcadd4f2bdbec621ace15c0184c7a68450a8495856
SSDEEP

786432:jfqIkFjx3sUnB4jjvv2vv6/0P/fHswuHRSrDi7T:9gcAgT2a/0XkwaR6+H

Score

8^/10

android banker discovery evasion

Malware Config

Targets

- Target
  
  6a7537bb73569dcfaae7bc63dce1595f_JaffaCakes118
- Size
  
  27.0MB
- MD5
  
  6a7537bb73569dcfaae7bc63dce1595f
- SHA1
  
  6d61c683371e9a593ecd203c7091a2fe6e4243ca
- SHA256
  
  8ab82ad1eb3c3dfe4d7d24f67193c4909844b52578c74e62d838d3b8c6c4f425
- SHA512
  
  3e3a4a882f77eeb49f3d8922aa8cd7bf6f6aff59192d555bc438f46e76cf9ee4ebaeb8b8955d9d284ee630dcadd4f2bdbec621ace15c0184c7a68450a8495856
- SSDEEP
  
  786432:jfqIkFjx3sUnB4jjvv2vv6/0P/fHswuHRSrDi7T:9gcAgT2a/0XkwaR6+H
Score

8^/10

banker discovery evasion
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
behavioral1 behavioral2
- Target
  
  VqsPhone.apk
- Size
  
  5.4MB
- MD5
  
  ea94b584de7d2f8fca6f57338cab811d
- SHA1
  
  3c38d437740a69b5dcd42999a00b7ae7e92c34c7
- SHA256
  
  7e58da593a2ce5c0f9b62771347890943e319d3772b511de34eb821b5b69b2f5
- SHA512
  
  38d28e6b80cb01ec2a43fa1c78a0c1f2469de165535a0c83a976dbd9321ddfa3647dd63bcdb3160b7ccdde977d25d4ce102ab1ba13e9f66d537fd1fbc3829ac6
- SSDEEP
  
  98304:0tgnsuMZLtIhAUN5CNLaFwdcv4xj1oLoH8DM4Ryhtv2Q9+qQc6+j9Ur3G5C7Eo1v:LMLM8LaFk+4t1oLoH8DM4R+yKTpUr3Gw
Score

1^/10
behavioral3 behavioral4 behavioral5
- Target
  
  __pasys_remote_banner.jar
- Size
  
  108KB
- MD5
  
  63ba17ca047dc71aa659c7ed8bb60de5
- SHA1
  
  675bd0556bce8d43cd29a6d9b3d996d41f3e0b2b
- SHA256
  
  2750f3af62f5b9d1d21f6a8215f529e472e7098ac16295b976a29115e8520a52
- SHA512
  
  5b70f6bc391276d2034a97e371adad0a635caafdfc33d32791db1432d4cca3f0364e1af6b10b574df5c8f3345bd5539a4d70455aa521f10b239e68216f5ddc39
- SSDEEP
  
  1536:JsIZFap4+HLANZ5+01fFI5iWBrANsLIHmd1C4i6L/AvuWD7i3z7Y6mrfrJvIC8O:JPZEpHrA3x1i53hxLOQ4I4mD3zk6mlI2
Score

1^/10
behavioral6 behavioral7 behavioral8
- Target
  
  __pasys_remote_banner.jar
- Size
  
  108KB
- MD5
  
  63ba17ca047dc71aa659c7ed8bb60de5
- SHA1
  
  675bd0556bce8d43cd29a6d9b3d996d41f3e0b2b
- SHA256
  
  2750f3af62f5b9d1d21f6a8215f529e472e7098ac16295b976a29115e8520a52
- SHA512
  
  5b70f6bc391276d2034a97e371adad0a635caafdfc33d32791db1432d4cca3f0364e1af6b10b574df5c8f3345bd5539a4d70455aa521f10b239e68216f5ddc39
- SSDEEP
  
  1536:JsIZFap4+HLANZ5+01fFI5iWBrANsLIHmd1C4i6L/AvuWD7i3z7Y6mrfrJvIC8O:JPZEpHrA3x1i53hxLOQ4I4mD3zk6mlI2
Score

1^/10
behavioral10 behavioral11 behavioral9

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

Software Discovery

Security Software Discovery

System Information Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bankerdiscoveryevasion

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11