3b40c1caeffdf0859dc59a7cab4f59b8d2a3c51cee474e4a35fec05a00566163 | Triage

Submit
Reports

Overview

overview

8

Static

static

6

6da745b290...18.apk

android-9-x86

8

6da745b290...18.apk

android-10-x64

8

6da745b290...18.apk

android-11-x64

8

Sharing

General

Target

6da745b2902991a4035478cf96176ba2_JaffaCakes118
Size

85KB
Sample

240524-hmy36sgh92
MD5

6da745b2902991a4035478cf96176ba2
SHA1

9073060ea5fdb673a2fab27b6f1f611cdf013487
SHA256

3b40c1caeffdf0859dc59a7cab4f59b8d2a3c51cee474e4a35fec05a00566163
SHA512

b9c8c0099529bf4e415e95ac34ddced730de66267d5ee32ad6e4a1b7f4a92ebec545ad2cc8ede3f86ed361ff3d310b7ca5829912cb315a7fdc8e91aab3f02ed1
SSDEEP

1536:SDvmqULvLSbgLKxe7wugwE84uq3TulmFIOwe+PTkvPDDA8LyJVFxDWPbWPN:oeqMKxLwE84uq3TulmGOwBrMLDAbJLxz

Score

8^/10

android discovery evasion impact privilege_escalation stealth trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

6da745b2902991a4035478cf96176ba2_JaffaCakes118.apk

Resource

android-x86-arm-20240514-en

discovery evasion impact privilege_escalation stealth trojan

android-9-x86

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

6da745b2902991a4035478cf96176ba2_JaffaCakes118.apk

Resource

android-x64-20240514-en

discovery evasion stealth trojan

android-10-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

6da745b2902991a4035478cf96176ba2_JaffaCakes118.apk

Resource

android-x64-arm64-20240514-en

discovery evasion impact privilege_escalation stealth trojan

android-11-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  6da745b2902991a4035478cf96176ba2_JaffaCakes118
- Size
  
  85KB
- MD5
  
  6da745b2902991a4035478cf96176ba2
- SHA1
  
  9073060ea5fdb673a2fab27b6f1f611cdf013487
- SHA256
  
  3b40c1caeffdf0859dc59a7cab4f59b8d2a3c51cee474e4a35fec05a00566163
- SHA512
  
  b9c8c0099529bf4e415e95ac34ddced730de66267d5ee32ad6e4a1b7f4a92ebec545ad2cc8ede3f86ed361ff3d310b7ca5829912cb315a7fdc8e91aab3f02ed1
- SSDEEP
  
  1536:SDvmqULvLSbgLKxe7wugwE84uq3TulmFIOwe+PTkvPDDA8LyJVFxDWPbWPN:oeqMKxLwE84uq3TulmGOwBrMLDAbJLxz
Score

8^/10

discovery evasion impact privilege_escalation stealth trojan
- Removes its main activity from the application launcher
  stealth trojan evasion
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Tries to add a device administrator.
  privilege_escalation impact
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
- Reads information about phone network operator.
  discovery
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

discoveryevasionimpactprivilege_escalationstealthtrojan

behavioral2

discoveryevasionstealthtrojan

behavioral3

discoveryevasionimpactprivilege_escalationstealthtrojan

© 2018-2024

Terms | Privacy