56e7c2820c59cc26dbfb9cab1ed13452b3a3c86c97d8ab40fe508ff30b27a134 | Triage

Sharing

General

Target

7d80c05e312c1da79656ecba225790f4_JaffaCakes118
Size

213KB
Sample

240528-s6lbjaaf8t
MD5

7d80c05e312c1da79656ecba225790f4
SHA1

32c3da435adaf7a3bf010668e6ae401cc0521696
SHA256

56e7c2820c59cc26dbfb9cab1ed13452b3a3c86c97d8ab40fe508ff30b27a134
SHA512

7f77de367c0fba94c9aa050a39a1d621eb4178322a79bcbb7ab5aae68959ddc0d295def9e13644d52ef3b7875966254ea3467e52d58bf82f53233d633a00e2db
SSDEEP

6144:fIb/0szi6yig4a8dHtVIFXhYoBKSTrfI/+NE3MRB7:wz0K99xa8dHb0XioBlTrf0F3Mj

Score

8^/10

android discovery evasion impact persistence stealth trojan

Malware Config

Targets

- Target
  
  7d80c05e312c1da79656ecba225790f4_JaffaCakes118
- Size
  
  213KB
- MD5
  
  7d80c05e312c1da79656ecba225790f4
- SHA1
  
  32c3da435adaf7a3bf010668e6ae401cc0521696
- SHA256
  
  56e7c2820c59cc26dbfb9cab1ed13452b3a3c86c97d8ab40fe508ff30b27a134
- SHA512
  
  7f77de367c0fba94c9aa050a39a1d621eb4178322a79bcbb7ab5aae68959ddc0d295def9e13644d52ef3b7875966254ea3467e52d58bf82f53233d633a00e2db
- SSDEEP
  
  6144:fIb/0szi6yig4a8dHtVIFXhYoBKSTrfI/+NE3MRB7:wz0K99xa8dHb0XioBlTrf0F3Mj
Score

8^/10

discovery evasion impact persistence stealth trojan
- Removes its main activity from the application launcher
  stealth trojan evasion
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  evasion persistence
- Checks if the internet connection is available
  discovery
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Foreground Persistence

Privilege Escalation

Defense Evasion

Foreground Persistence

Hide Artifacts

Suppress Application Icon

Credential Access

Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Tasks

static1

behavioral1

discoveryevasionimpactpersistencestealthtrojan

behavioral2

discoveryevasionimpactpersistencestealthtrojan

behavioral3

discoveryevasionimpactpersistencestealthtrojan