2f07e915c1f9e7589346d19854a70eb1b343800a7d141e1c6d7373da8a650088 | Triage

Submit
Reports

Overview

overview

8

Static

static

6

7c1244c864...18.apk

android-9-x86

8

7c1244c864...18.apk

android-10-x64

8

7c1244c864...18.apk

android-11-x64

8

Sharing

General

Target

7c1244c864160d05f260cdf5b47365db_JaffaCakes118
Size

433KB
Sample

240528-hmqf2ahh5z
MD5

7c1244c864160d05f260cdf5b47365db
SHA1

94ae03af340e00208d5f934a71416b026d298f34
SHA256

2f07e915c1f9e7589346d19854a70eb1b343800a7d141e1c6d7373da8a650088
SHA512

3ef375f3c79d907d7a756b5e35b2e836b3402f44a9392d22d389e336b31950764ebebb889014f9212b96dea01ecf7b95b41cfa9584ec865831e01febbd06e15c
SSDEEP

12288:79y+cjUQ7KCvaXEJwUOEDryP0aqwQ5L3J3stcUV42g:4+qGDEtOEDr4JcxA1U

Score

8^/10

android discovery evasion impact privilege_escalation stealth trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

7c1244c864160d05f260cdf5b47365db_JaffaCakes118.apk

Resource

android-x86-arm-20240514-en

discovery evasion impact privilege_escalation stealth trojan

android-9-x86

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

7c1244c864160d05f260cdf5b47365db_JaffaCakes118.apk

Resource

android-x64-20240514-en

discovery evasion stealth trojan

android-10-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

7c1244c864160d05f260cdf5b47365db_JaffaCakes118.apk

Resource

android-x64-arm64-20240514-en

discovery evasion impact privilege_escalation stealth trojan

android-11-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  
  7c1244c864160d05f260cdf5b47365db_JaffaCakes118
- Size
  
  433KB
- MD5
  
  7c1244c864160d05f260cdf5b47365db
- SHA1
  
  94ae03af340e00208d5f934a71416b026d298f34
- SHA256
  
  2f07e915c1f9e7589346d19854a70eb1b343800a7d141e1c6d7373da8a650088
- SHA512
  
  3ef375f3c79d907d7a756b5e35b2e836b3402f44a9392d22d389e336b31950764ebebb889014f9212b96dea01ecf7b95b41cfa9584ec865831e01febbd06e15c
- SSDEEP
  
  12288:79y+cjUQ7KCvaXEJwUOEDryP0aqwQ5L3J3stcUV42g:4+qGDEtOEDr4JcxA1U
Score

8^/10

discovery evasion impact privilege_escalation stealth trojan
- Removes its main activity from the application launcher
  stealth trojan evasion
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Tries to add a device administrator.
  privilege_escalation impact
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
- Reads information about phone network operator.
  discovery
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

discoveryevasionimpactprivilege_escalationstealthtrojan

behavioral2

discoveryevasionstealthtrojan

behavioral3

discoveryevasionimpactprivilege_escalationstealthtrojan

© 2018-2024

Terms | Privacy