b3be76a449ec8792925165b0b3aaa203808e2f84e0d5b79276231c2bc3aac093 | Triage

Sharing

General

Target

6ab8eae0e9c262e978c2f3861f4edbd6_JaffaCakes118
Size

26.4MB
Sample

240523-m3zf4adg8x
MD5

6ab8eae0e9c262e978c2f3861f4edbd6
SHA1

79aa0d4f8ae484b7af82c6c2de6bbcde1c0b0e4f
SHA256

b3be76a449ec8792925165b0b3aaa203808e2f84e0d5b79276231c2bc3aac093
SHA512

4d44bd388c12819f60eecd51d4db21d6cc57de0eed9d4f5e0f1947141451dfd88bcedc72dcec789c88cfc8ff262a50d296d25383c20f91d36ece0a59a6ba2d94
SSDEEP

786432:09iyTPWg/60uRFD3cNIa6VwLkE3id6WQk7SfyQa:BgWg/0RFDdVoyGkt

Score

8^/10

android discovery evasion impact persistence

Malware Config

Targets

- Target
  
  6ab8eae0e9c262e978c2f3861f4edbd6_JaffaCakes118
- Size
  
  26.4MB
- MD5
  
  6ab8eae0e9c262e978c2f3861f4edbd6
- SHA1
  
  79aa0d4f8ae484b7af82c6c2de6bbcde1c0b0e4f
- SHA256
  
  b3be76a449ec8792925165b0b3aaa203808e2f84e0d5b79276231c2bc3aac093
- SHA512
  
  4d44bd388c12819f60eecd51d4db21d6cc57de0eed9d4f5e0f1947141451dfd88bcedc72dcec789c88cfc8ff262a50d296d25383c20f91d36ece0a59a6ba2d94
- SSDEEP
  
  786432:09iyTPWg/60uRFD3cNIa6VwLkE3id6WQk7SfyQa:BgWg/0RFDdVoyGkt
Score

8^/10

discovery evasion impact persistence
- Checks if the Android device is rooted.
  evasion
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Checks if the internet connection is available
  discovery
behavioral1
- Target
  
  autonavi_Resource1_1_0.png
- Size
  
  385KB
- MD5
  
  b0cca8cb9c4c6d983fff5966fa1f3946
- SHA1
  
  372350ec69955f08f029994432ca33cb52a27630
- SHA256
  
  1fc73d0328e4d89dd1b8395833da601812a6b4cd280555cd0a300fb44a7be64b
- SHA512
  
  cf0c7d14118a2d37a401d4a65a12d9d4d66ae531c887cb33798759ccd90e373367e4fbf03f0eee7bc46a43b416305b43b5ce308bff32054d1a6dec6d736475dc
- SSDEEP
  
  12288:Dqoa+TPNOzQ/0x1DuXyE0bswGo/7N7lRn2o5M:21mOM/KFFE6co/5TnbW
Score

1^/10
behavioral2 behavioral3 behavioral4

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Tasks

static1

behavioral1

discoveryevasionimpactpersistence

behavioral2

behavioral3

behavioral4