036a6b3095a3bbc31013eca2835edc04b04027503ec6dd0bb760bf71318ca3bb | Triage

Sharing

General

Target

760befffdf8037837b9f3c9ab2f8c50e_JaffaCakes118
Size

5.2MB
Sample

240526-tnrk9sda63
MD5

760befffdf8037837b9f3c9ab2f8c50e
SHA1

558e23cddd081d9e96143935e6af12aaf107508d
SHA256

036a6b3095a3bbc31013eca2835edc04b04027503ec6dd0bb760bf71318ca3bb
SHA512

3befda444b5f8a37035a27fff6e780709bdb5782e38ed6d781b93074223d262cbcc9d725e5263d58e557d3459025d59d59f9fbedff86d6ab2e8c8e5a550538e9
SSDEEP

98304:etxLHcjljufnqnOd1wuesBGIIRq0ld3CkZTsGaMe/qlJd/DuE0SilaaGKuCuEJM8:etV8jRoqnO3wTsvIdVpaUuE0SRKuCuEx

Score

8^/10

android banker discovery evasion persistence

Malware Config

Targets

- Target
  
  760befffdf8037837b9f3c9ab2f8c50e_JaffaCakes118
- Size
  
  5.2MB
- MD5
  
  760befffdf8037837b9f3c9ab2f8c50e
- SHA1
  
  558e23cddd081d9e96143935e6af12aaf107508d
- SHA256
  
  036a6b3095a3bbc31013eca2835edc04b04027503ec6dd0bb760bf71318ca3bb
- SHA512
  
  3befda444b5f8a37035a27fff6e780709bdb5782e38ed6d781b93074223d262cbcc9d725e5263d58e557d3459025d59d59f9fbedff86d6ab2e8c8e5a550538e9
- SSDEEP
  
  98304:etxLHcjljufnqnOd1wuesBGIIRq0ld3CkZTsGaMe/qlJd/DuE0SilaaGKuCuEJM8:etV8jRoqnO3wTsvIdVpaUuE0SRKuCuEx
Score

8^/10

banker discovery evasion persistence
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Acquires the wake lock
- Checks if the internet connection is available
  discovery
- Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
behavioral1

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

Software Discovery

Security Software Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bankerdiscoveryevasionpersistence