56de252e9dc0d1a4a851379a94aedbafc980ec6515f25f61e7158dedbc4cb656 | Triage

Sharing

General

Target

72017658c7bdb4d6def574772017eeec_JaffaCakes118
Size

17.0MB
Sample

240525-p2yjhscf74
MD5

72017658c7bdb4d6def574772017eeec
SHA1

b69c0a4cb541910afecf6e9a91dbead7bec01142
SHA256

56de252e9dc0d1a4a851379a94aedbafc980ec6515f25f61e7158dedbc4cb656
SHA512

e69ea48311c3b69cb8075c48443a912e4b93440820f5a900404d20e8555d0c8c5c900936d8aabe79f83cd3c4f12201b2d01c9e41be3c5e00e21a2232579a3596
SSDEEP

393216:xauBEYFUZuE7GZA1+ob0jJlpjHa1kNBFrE44DJ:xauBurZ8pa14tx49

Score

8^/10

android discovery evasion impact persistence

Malware Config

Targets

- Target
  
  72017658c7bdb4d6def574772017eeec_JaffaCakes118
- Size
  
  17.0MB
- MD5
  
  72017658c7bdb4d6def574772017eeec
- SHA1
  
  b69c0a4cb541910afecf6e9a91dbead7bec01142
- SHA256
  
  56de252e9dc0d1a4a851379a94aedbafc980ec6515f25f61e7158dedbc4cb656
- SHA512
  
  e69ea48311c3b69cb8075c48443a912e4b93440820f5a900404d20e8555d0c8c5c900936d8aabe79f83cd3c4f12201b2d01c9e41be3c5e00e21a2232579a3596
- SSDEEP
  
  393216:xauBEYFUZuE7GZA1+ob0jJlpjHa1kNBFrE44DJ:xauBurZ8pa14tx49
Score

8^/10

discovery evasion impact persistence
- Checks if the Android device is rooted.
  evasion
- Checks known Qemu files.
  Checks for known Qemu files that exist on Android virtual device images.
  evasion
- Checks known Qemu pipes.
  Checks for known pipes used by the Android emulator to communicate with the host.
  evasion
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Checks if the internet connection is available
  discovery
behavioral1
- Target
  
  bdxadsdk.jar
- Size
  
  195KB
- MD5
  
  c3b999326b7187bdd85fd971f93376d6
- SHA1
  
  978fa76710506b2aa2dc1502e2697355cc64e34e
- SHA256
  
  555e565b45d2b030652d914830ad427d15182797886316024a2f04df6ac81d5e
- SHA512
  
  240981a457a3df5ce7f51ae1e0b323efc37b349a261e21d52ef8e9256d758f5c7dd4bcd6411ca2dc247de1beec2ad1a0f7f49d2370971c8c65f95b0d6c14b31e
- SSDEEP
  
  3072:bFg/OTNG1obNXB45vAEsreszccGiXzU+wtBJPkyzy4H/mqku/DjEWKVQNCDu:u/Ow+x69ftc9XzStBJ8y5mqkYDjv3Gu
Score

1^/10
behavioral2 behavioral3 behavioral4
- Target
  
  gdtadv2.jar
- Size
  
  590KB
- MD5
  
  a20b450b9eddfc89b600595f52e69835
- SHA1
  
  8fac99e31e63859f9779ce28e526b7a7bd5e1033
- SHA256
  
  cbece95c97f4e62939f1623c2cbdd9c3271a6600d35d756a0cd9795bb264b690
- SHA512
  
  c135b78fa9105bcd61807c52fb3bee327bf000b8d88676be69f6128062cc53fcb2ebb866e8cfabfb2afb3fc96b06ca9394bf60648eec7e783ecdb7862bd45a59
- SSDEEP
  
  12288:PX9lN1F524rzvxSbYm5iabo/GaQIcTlwK9Cp3ZUbRkQiQ0747vBDZ:lf1bfrzO5o/GaYcp3vQB04vhZ
Score

1^/10
behavioral5

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Tasks

static1

behavioral1

discoveryevasionimpactpersistence

behavioral2

behavioral3

behavioral4

behavioral5