bfe0ebe9b41a67d6780ed4e744354f7df03bedaf39dd9a8c24a6ba8b1106b4ac | Triage

Sharing

General

Target

8ea2632826410b0d651358afffed67fe_JaffaCakes118
Size

16.9MB
Sample

240602-tf86caha53
MD5

8ea2632826410b0d651358afffed67fe
SHA1

eb3b31b5888beaee1efe54e2a71caed64c79e84d
SHA256

bfe0ebe9b41a67d6780ed4e744354f7df03bedaf39dd9a8c24a6ba8b1106b4ac
SHA512

ec3e91ef43935fc9e3247106a7c2f7ee765fd86f4391de13ffc794692cd92397c11aac2caa54cac63f39a03e6e8d7f8821a9a0b79bb5499416ea99769356c7b2
SSDEEP

393216:PcVLDUom8L/XVUNyqUd1UYMzg+9AZmNwu8Zj3xisCCVyjIzCRcS:Px8T+NyqUd2Y+gEA4qZj37RVy6Wx

Score

7^/10

android discovery macos

Malware Config

Targets

- Target
  
  DroidJack/Apktool/SandroRat.apk
- Size
  
  211KB
- MD5
  
  aa4f4ed6e00bd089fcd12da592950d40
- SHA1
  
  e4b451505f2c91454381de955761db817aeca50e
- SHA256
  
  cdb5ed8a213708bfbd89cc0097668a4ed2825803dab9b690bf6961317ccfce71
- SHA512
  
  8444431ca60b509e153767299ce12c9d5a07b279972d4daeb8af7c98a8a8bb4d9dc9c80580a8b88ebb04c826e9aa764a2b8c920d1f7bc240e2606aea7fc907c5
- SSDEEP
  
  6144:Fu4Kywcjs3QUjdQBV1qjK6+SwsNxNyz3Z+D:TXwcj+QUhQBrOK6+Spnyz3Z+D
Score

1^/10
behavioral1 behavioral2 behavioral3
- Target
  
  aapt
- Size
  
  1.1MB
- MD5
  
  908811c1fbcc200d01c885e0385dc79a
- SHA1
  
  1911c290fb52d2fe821ebec5cec5450735fa58ec
- SHA256
  
  4b0b43987b479c242f40c91bca06a0e7b08dc0af3ce51490b3149cf6b0be9612
- SHA512
  
  76e56e543e7e0944f97f83f7b70368972f84cd732484b3ba1f9d67e61cba1a50b0775c49e34c0c9946ab81a828c6f24cd009e5b20d6d2add13dd07dd2edbeb62
- SSDEEP
  
  24576:xHinq2NVyW/ZH+EbKZBKUq6HGnVgXEM9Vk13yqGV:xHiq2NVflEZIUq6HGnVOq3eV
Score

1^/10
behavioral4
- Target
  
  aapt.exe
- Size
  
  833KB
- MD5
  
  4fe6d020deb0e1b52c3b358355ad245d
- SHA1
  
  5851663a552bd3e477f4d319ed0b72a1f4f1ff46
- SHA256
  
  e37c72c9aab974d4e02e9e4d86ccfaefa5e093f06969b278db17217b984bc227
- SHA512
  
  0a6913a2067da691d6bc00b1744d878c2769f078410da126619cbffcdabbc2647e297ab1198974e160f63159136516f814c56d841c9ef197438fc4419d813c98
- SSDEEP
  
  24576:zvh+TyoVx8BMTFoTVM/zmn//SodZ5yzSWcdUX/MYdTko8:z6wgmdZcmxedT
Score

1^/10
behavioral5 behavioral6
- Target
  
  DroidJack/Apktool/apktool.jar
- Size
  
  7.9MB
- MD5
  
  90abfb0564325cb20e6fb40d1ee4b787
- SHA1
  
  016be266e3e14eac8b54a8a994cf5e9ca439c160
- SHA256
  
  1920f046690932719ee1322739a77a2ca69acc9ea4162556b51601cc5465dd20
- SHA512
  
  d5e8ddb375b7e9e0bb04241dd2f98419551b0cddab861d6ec583ef2e0c8c50055425d0a8a411d40ab024b78c09ca809182b1f899bcbd6325d0ae7ff92dac8304
- SSDEEP
  
  196608:Y+bqB+7PsbNCKys6SjTJAvdPZpQe18MZGVOl2s:A+7Pess6SydfQcZGVOl2s
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral7 behavioral8
- Target
  
  DroidJack/Apktool/signapk.jar
- Size
  
  7KB
- MD5
  
  aec6985fe2314e4d032ba6d192ac4163
- SHA1
  
  b16f006e7bf509add528f4b9a075ca373d531203
- SHA256
  
  b17534e89a5b58d5e343ba54a49da579cf9213988f4beeae24fe4582a0c226bb
- SHA512
  
  5347fb296f87fb71046e0fd261a495485254ed7bd6d68da3aebb346267e5bc14ad8a89aa5496b31b2bf0da35b8c7c4cbbf71ace977443f09ecdbe50e1288bcea
- SSDEEP
  
  192:20AfGZ6TJSM/+Lz2dBM8ZRSvdrGanQRSHFzJ:dj6tof2nMySvldT
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral10 behavioral9
- Target
  
  DroidJack/DroidJack.jar
- Size
  
  1.5MB
- MD5
  
  9ab786c7154b2e24704681de5ed5d7ac
- SHA1
  
  b1d68ff75291581effc55935914247917435910f
- SHA256
  
  e466991f74d8a2d9345d0172b1966d07345b6f315f59ce63a44ad74a62ed1869
- SHA512
  
  92a13592f9f4b7a8214990e57112d0fc3607fe84d44deda5294796ae5bbd5f235d6c467a124b44c5372469dce6e5f9e77b31e45f4da9d9089455b3f6d623990c
- SSDEEP
  
  12288:HqS40FnjsDB6+awgOUYu+UmZKKjHZVR2dPPzeal8a0VnxcHkUq686P837us9jpSm:7Bg+jEwK8dPPzearfH1q68U8V7SeI6v
Score

7^/10

discovery
- Loads dropped DLL
- Modifies file permissions
  discovery
behavioral11 behavioral12
- Target
  
  DroidJack/DroidJack_lib/commons-codec-1.6.jar
- Size
  
  227KB
- MD5
  
  5970f54883b4831b24b97f1125ba27e6
- SHA1
  
  b7f0fc8f61ecadeb3695f0b9464755eee44374d4
- SHA256
  
  54b34e941b8e1414bd3e40d736efd3481772dc26db3296f6aa45cec9f6203d86
- SHA512
  
  752fca09371e0e228432155533a9b84f0442cafd7f25ebf0c6c2024d541fbba80882e71aee047ec94cd22c0d8114942e967652913412f5cbcf9b816c0e1fc1ad
- SSDEEP
  
  6144:PDTWpPoPf1mNIr6ZuH9FYaGC5Y79N22RKzvqDNuwv3:P2FoPf1mNSR2vvpN8ziD8Q
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral13 behavioral14
- Target
  
  DroidJack/DroidJack_lib/commons-io-2.4.jar
- Size
  
  180KB
- MD5
  
  7f97854dc04c119d461fed14f5d8bb96
- SHA1
  
  b1b6ea3b7e4aa4f492509a4952029cd8e48019ad
- SHA256
  
  cc6a41dc3eaacc9e440a6bd0d2890b20d36b4ee408fe2d67122f328bb6e01581
- SHA512
  
  957a438894a196e534af9ae1e61fb21e16f273952b55a81abb8faf0b139fc031ea940cf477f81704db417d1ce6ff2d9ddd4a2cbf316903b0e2dc1aeaef24f292
- SSDEEP
  
  3072:pF6mb9NczTyPXoTt75AQ6oBoEfDmwFHb/1Vd23l/ODoxb7DcKK:pYmb9iz2W75JLKEfDmwTVdilnxb7DTK
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral15 behavioral16
- Target
  
  DroidJack/DroidJack_lib/commons-logging-1.1.1.jar
- Size
  
  59KB
- MD5
  
  ed448347fc0104034aa14c8189bf37de
- SHA1
  
  5043bfebc3db072ed80fbd362e7caf00e885d8ae
- SHA256
  
  ce6f913cad1f0db3aad70186d65c5bc7ffcc9a99e3fe8e0b137312819f7c362f
- SHA512
  
  470323a2ee38be1b7ff8c84f1f5a5f8c4ec2ceb6b0649faa7b961f111865877dbe125409f72b1c52c7f18aa89e3469635c49ff4b83f86cc2f2eb2cc5562f9bff
- SSDEEP
  
  768:Jirg+Y5XjlrZKpQHBSSfqKeR5r8WuwjK+imOU4MYgArhR0S9mNIHZ8LwyEOuHwIx:EAXjqrSiKm8XrQMr0S9mqH+wyEpQIx
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral17 behavioral18
- Target
  
  DroidJack/DroidJack_lib/fluent-hc-4.2.5.jar
- Size
  
  21KB
- MD5
  
  5a387f6bec45cb94c7f2667c15cbf00f
- SHA1
  
  7eda2ae9f77415cf92651191e2229eae2caf0b61
- SHA256
  
  e13070f38957fc1c063895105ab64c810a3fd8b4b6ab5d45ce2d508c8d5fa192
- SHA512
  
  3d6dd064a131993a51bd66e8d100812c559365587a050a04511280092ef0cc58767bf5ca025641590c35c1b628ce20de0c56eddac63c67e4bb682ca3aaf9ed2b
- SSDEEP
  
  384:Z4O5kHnxNasdF0L3K+N72rrGczqcg6Mx/Sjd+/kxXyV3Iu52Pw+k7ozYj:t5QrkGYeGdcgZag/kxXyVF2PdYj
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral19 behavioral20
- Target
  
  DroidJack/DroidJack_lib/httpclient-4.2.5.jar
- Size
  
  423KB
- MD5
  
  23bd23d9d6327dd01fa41c12f15bf9bc
- SHA1
  
  3bfeb9062b12d5b340445336790dbc14c59c2d79
- SHA256
  
  56b4aae1bd9c66e1f890279dde75e81d226c97e302de97dafc081adeab956bbc
- SHA512
  
  e043ba153c74f65eb5185ab7e672cd7ba21cae95673b00447deb6abe0e6c4c72ae50c2ed784d020bf2558539b51f09d18e2481b617ccd887a4994adc2712effb
- SSDEEP
  
  6144:o3rUaqSQdbq34UBXmWeM9oUxVKzvEF1Wx2FMDtwiQJ+khG/UBE14CFmDt12l:o3w2QdeI6+MpOEFs1t7i+eG/7dSty
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral21 behavioral22
- Target
  
  DroidJack/DroidJack_lib/httpclient-cache-4.2.5.jar
- Size
  
  112KB
- MD5
  
  1c3611c6b424d2ac7945ab7e6243b942
- SHA1
  
  313cfeb950089985994736aa08885711c56b7e1e
- SHA256
  
  a67c50b74286766bdbb397088c4a78f1008d2ab17df7562db76439778c90430a
- SHA512
  
  9a3388b4c55a77740afe4062043cec1e863ed2f54058797311cfd6ad00b4f612eadd0c5ac743cc1be15cb8f8ada8197f638b64d0dec295c45457d011405d71a2
- SSDEEP
  
  1536:HKVZLQaLHU8KHG5QhPc2qxOkOq3Qlum2lZhFWgM2ukFdRpFU/uFS:HK3LQaLjKmidIxOtSQwmocghDF0/uS
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral23 behavioral24
- Target
  
  DroidJack/DroidJack_lib/httpcore-4.2.4.jar
- Size
  
  221KB
- MD5
  
  6ccb86231d8a8b99c551b4ddf926ddd1
- SHA1
  
  3b7f38df6de5dd8b500e602ae8c2dd5ee446f883
- SHA256
  
  bda2b9e0464f7a0e122d5e9bff7b384f3bc3a91af18ad51e029deaaa599e5db3
- SHA512
  
  0c4de4513cafb13a81bcad7cc1a4e45759ba32654eafde15665afde63a427b04ac25cfe17e4bbd1887225960b5aaf7e73382e35ec16993dbc1fd19a2bf5e8ab9
- SSDEEP
  
  6144:mjj5oIwPj1CM0oifaJtv27fxnNibFx992P0SfMPlJ:mRoZPjuwgRNUIPTW
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral25 behavioral26
- Target
  
  DroidJack/DroidJack_lib/httpmime-4.2.5.jar
- Size
  
  25KB
- MD5
  
  8df1654c39f4116c9f1fcd04f8505bc2
- SHA1
  
  6efc2f9df23c2ac4d3b701a11cab9f9fa6a641d4
- SHA256
  
  2ef409c599c532ca1e692013582695231bdb9f3956d4ec9ba3ac71300728b382
- SHA512
  
  a0f8aafeb69e1fc7616e813e30515997068faba245641c0437dc8c24f5e348ab77457b4d9cafb59a941d5dcdee187ce6d249cf313fe0d09b1b5ce3854b93d357
- SSDEEP
  
  384:mBO5kHnxNHhVgjAV+KLz4NqO2ottK/lqEBrtxmxvH6qou3oyExBwI9F:F5QBV4Dy4NtttKdq6xmxZouUx5F
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral27 behavioral28
- Target
  
  DroidJack/DroidJack_lib/jaad-0.8.4.jar
- Size
  
  653KB
- MD5
  
  4c09aa32e036530d42319aec289928a7
- SHA1
  
  f6617d5b95437557042e2d21f2b49121174ac80d
- SHA256
  
  be6ba7919a20f602703536e343860c2ae74ad18da195fd845743b877dbb379f7
- SHA512
  
  d1ee7d5d1f5c8599bfa1eaf779e29033768c92e56cc69c9d30d809ad4b41ba9bfcd616af2f8cb3b7e00bab2b2626dfc0d46b78ed072d933d200e801b70c888ea
- SSDEEP
  
  12288:l0baMUzCKol2XKnbywMnCrR+7UZYVw7hHRNBeH3Q6dKncq:WeMUmKqoKn2RClmyYsRDqbdKncq
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral29 behavioral30
- Target
  
  DroidJack/DroidJack_lib/kryonet-2.21-all.jar
- Size
  
  329KB
- MD5
  
  3c05283c589306a23b8602c5bc474361
- SHA1
  
  d906a8f689f340b39a7f78bf9b4474aa819d7391
- SHA256
  
  eab8c51e0e3a11bb1411ace21d9876184d5084fde82ee298da03ca0627499151
- SHA512
  
  1aea27eb1b029ae1773e7b0ffebab51de79ee8746762ba153c4b20fd23b4c59f7c96804a08cc654b5ab9dc2135db14bccd69a6fe69e5677c3bd639f3176fc74c
- SSDEEP
  
  6144:TuCLxaF2a4FlrHUuOG8RhoSPPN9NO/G+yspLXbCjL:Hc25UVHVO/Hl3Cv
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32