9b198986938166b34ea0cbe516e48e542c1e2e756269db53487fb47ec0d320a3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89c313f28b63ad9ac35cef1112139313_JaffaCakes118
Size

865KB
Sample

240601-jd6mbseh89
MD5

89c313f28b63ad9ac35cef1112139313
SHA1

59327f03b70feff03a88f797b26279eb1229d8a2
SHA256

9b198986938166b34ea0cbe516e48e542c1e2e756269db53487fb47ec0d320a3
SHA512

329defec5e321e4757a29ef0edbc3d920d8ecedba2f8e854189c55ac11ac1779dbcebc7b374e1a789d6c6b32eda8ff764bcfdb279f667b7b82ffa36c2b76d6ef
SSDEEP

24576:KS4S17JH43TVFcYhF2b1YH4xa+nIV14Rf:t4+xqfcYhF2biH4Bmeh

Score

8^/10

android banker collection discovery evasion impact

Malware Config

Targets

- Target
  
  89c313f28b63ad9ac35cef1112139313_JaffaCakes118
- Size
  
  865KB
- MD5
  
  89c313f28b63ad9ac35cef1112139313
- SHA1
  
  59327f03b70feff03a88f797b26279eb1229d8a2
- SHA256
  
  9b198986938166b34ea0cbe516e48e542c1e2e756269db53487fb47ec0d320a3
- SHA512
  
  329defec5e321e4757a29ef0edbc3d920d8ecedba2f8e854189c55ac11ac1779dbcebc7b374e1a789d6c6b32eda8ff764bcfdb279f667b7b82ffa36c2b76d6ef
- SSDEEP
  
  24576:KS4S17JH43TVFcYhF2b1YH4xa+nIV14Rf:t4+xqfcYhF2biH4Bmeh
Score

8^/10

banker collection discovery evasion impact
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Requests cell location
  Uses Android APIs to to get current cell location.
  collection discovery evasion
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Reads the content of SMS inbox messages.
  collection
- Checks if the internet connection is available
  discovery
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
- Reads information about phone network operator.
  discovery
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Execution Guardrails

Geofencing

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

Location Tracking

Software Discovery

Security Software Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Location Tracking

Protected User Data

SMS Messages

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Tasks

static1

behavioral1

bankercollectiondiscoveryevasionimpact

behavioral2

bankercollectiondiscoveryevasionimpact

behavioral3

bankercollectiondiscoveryevasionimpact