5af05586488154782b2f591b3df25157351b3eb28aa0ff5226d4054f9f9071b8 | Triage

Sharing

General

Target

7c78ddeb38e7bcb53b7708a6ba9e69d9_JaffaCakes118
Size

14.8MB
Sample

240528-ldxersea2t
MD5

7c78ddeb38e7bcb53b7708a6ba9e69d9
SHA1

7e3527b319ef40493729e5539cfe96e001b481fb
SHA256

5af05586488154782b2f591b3df25157351b3eb28aa0ff5226d4054f9f9071b8
SHA512

f1dcfdf8a0348af70274b39f903628fe7aae2f0e25506c726e499d49f4bfe70caf9375e9327d82c83754f9cdf33addbe8662a82fbd2fc775f444a6bb3fec1729
SSDEEP

393216:rmk0xV/D4GIpY8x7Yd3AAyGR+ztyBr2grhk:rBGIp83Hyq+cx2gru

Score

8^/10

android discovery evasion persistence

Malware Config

Targets

- Target
  
  7c78ddeb38e7bcb53b7708a6ba9e69d9_JaffaCakes118
- Size
  
  14.8MB
- MD5
  
  7c78ddeb38e7bcb53b7708a6ba9e69d9
- SHA1
  
  7e3527b319ef40493729e5539cfe96e001b481fb
- SHA256
  
  5af05586488154782b2f591b3df25157351b3eb28aa0ff5226d4054f9f9071b8
- SHA512
  
  f1dcfdf8a0348af70274b39f903628fe7aae2f0e25506c726e499d49f4bfe70caf9375e9327d82c83754f9cdf33addbe8662a82fbd2fc775f444a6bb3fec1729
- SSDEEP
  
  393216:rmk0xV/D4GIpY8x7Yd3AAyGR+ztyBr2grhk:rBGIp83Hyq+cx2gru
Score

8^/10

discovery evasion persistence
- Checks if the Android device is rooted.
  evasion
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Acquires the wake lock
- Checks if the internet connection is available
  discovery
- Checks the presence of a debugger
  evasion
behavioral1 behavioral2

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasion