bfe0ebe9b41a67d6780ed4e744354f7df03bedaf39dd9a8c24a6ba8b1106b4ac | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
8ea2632826410b0d651358afffed67fe_JaffaCakes118
Size 16.9MB
Sample240602-tf86caha53
SHA256 bfe0ebe9b41a67d6780ed4e744354f7df03bedaf39dd9a8c24a6ba8b1106b4ac
MD5 8ea2632826410b0d651358afffed67fe
SHA1 eb3b31b5888beaee1efe54e2a71caed64c79e84d
SHA512 ec3e91ef43935fc9e3247106a7c2f7ee765fd86f4391de13ffc794692cd92397c11aac2caa54cac63f39a03e6e8d7f8821a9a0b79bb5499416ea99769356c7b2
SSDEEP 393216:PcVLDUom8L/XVUNyqUd1UYMzg+9AZmNwu8Zj3xisCCVyjIzCRcS:Px8T+NyqUd2Y+gEA4qZj37RVy6Wx
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

android discovery macos

Malware Config

Targets

- Target
  DroidJack/Apktool/SandroRat.apk
- Size 211KB
- SHA256 cdb5ed8a213708bfbd89cc0097668a4ed2825803dab9b690bf6961317ccfce71
- MD5 aa4f4ed6e00bd089fcd12da592950d40
- SHA1 e4b451505f2c91454381de955761db817aeca50e
- SHA512 8444431ca60b509e153767299ce12c9d5a07b279972d4daeb8af7c98a8a8bb4d9dc9c80580a8b88ebb04c826e9aa764a2b8c920d1f7bc240e2606aea7fc907c5
- SSDEEP 6144:Fu4Kywcjs3QUjdQBV1qjK6+SwsNxNyz3Z+D:TXwcj+QUhQBrOK6+Spnyz3Z+D
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral1 behavioral2 behavioral3
- Target
  aapt
- Size 1.1MB
- SHA256 4b0b43987b479c242f40c91bca06a0e7b08dc0af3ce51490b3149cf6b0be9612
- MD5 908811c1fbcc200d01c885e0385dc79a
- SHA1 1911c290fb52d2fe821ebec5cec5450735fa58ec
- SHA512 76e56e543e7e0944f97f83f7b70368972f84cd732484b3ba1f9d67e61cba1a50b0775c49e34c0c9946ab81a828c6f24cd009e5b20d6d2add13dd07dd2edbeb62
- SSDEEP 24576:xHinq2NVyW/ZH+EbKZBKUq6HGnVgXEM9Vk13yqGV:xHiq2NVflEZIUq6HGnVOq3eV
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral4
- Target
  aapt.exe
- Size 833KB
- SHA256 e37c72c9aab974d4e02e9e4d86ccfaefa5e093f06969b278db17217b984bc227
- MD5 4fe6d020deb0e1b52c3b358355ad245d
- SHA1 5851663a552bd3e477f4d319ed0b72a1f4f1ff46
- SHA512 0a6913a2067da691d6bc00b1744d878c2769f078410da126619cbffcdabbc2647e297ab1198974e160f63159136516f814c56d841c9ef197438fc4419d813c98
- SSDEEP 24576:zvh+TyoVx8BMTFoTVM/zmn//SodZ5yzSWcdUX/MYdTko8:z6wgmdZcmxedT
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5 behavioral6
- Target
  DroidJack/Apktool/apktool.jar
- Size 7.9MB
- SHA256 1920f046690932719ee1322739a77a2ca69acc9ea4162556b51601cc5465dd20
- MD5 90abfb0564325cb20e6fb40d1ee4b787
- SHA1 016be266e3e14eac8b54a8a994cf5e9ca439c160
- SHA512 d5e8ddb375b7e9e0bb04241dd2f98419551b0cddab861d6ec583ef2e0c8c50055425d0a8a411d40ab024b78c09ca809182b1f899bcbd6325d0ae7ff92dac8304
- SSDEEP 196608:Y+bqB+7PsbNCKys6SjTJAvdPZpQe18MZGVOl2s:A+7Pess6SydfQcZGVOl2s
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral7 behavioral8
- Target
  DroidJack/Apktool/signapk.jar
- Size 7KB
- SHA256 b17534e89a5b58d5e343ba54a49da579cf9213988f4beeae24fe4582a0c226bb
- MD5 aec6985fe2314e4d032ba6d192ac4163
- SHA1 b16f006e7bf509add528f4b9a075ca373d531203
- SHA512 5347fb296f87fb71046e0fd261a495485254ed7bd6d68da3aebb346267e5bc14ad8a89aa5496b31b2bf0da35b8c7c4cbbf71ace977443f09ecdbe50e1288bcea
- SSDEEP 192:20AfGZ6TJSM/+Lz2dBM8ZRSvdrGanQRSHFzJ:dj6tof2nMySvldT
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral10 behavioral9
- Target
  DroidJack/DroidJack.jar
- Size 1.5MB
- SHA256 e466991f74d8a2d9345d0172b1966d07345b6f315f59ce63a44ad74a62ed1869
- MD5 9ab786c7154b2e24704681de5ed5d7ac
- SHA1 b1d68ff75291581effc55935914247917435910f
- SHA512 92a13592f9f4b7a8214990e57112d0fc3607fe84d44deda5294796ae5bbd5f235d6c467a124b44c5372469dce6e5f9e77b31e45f4da9d9089455b3f6d623990c
- SSDEEP 12288:HqS40FnjsDB6+awgOUYu+UmZKKjHZVR2dPPzeal8a0VnxcHkUq686P837us9jpSm:7Bg+jEwK8dPPzearfH1q68U8V7SeI6v
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Loads dropped DLL
- Modifies file permissions
  discovery
behavioral11 behavioral12
- Target
  DroidJack/DroidJack_lib/commons-codec-1.6.jar
- Size 227KB
- SHA256 54b34e941b8e1414bd3e40d736efd3481772dc26db3296f6aa45cec9f6203d86
- MD5 5970f54883b4831b24b97f1125ba27e6
- SHA1 b7f0fc8f61ecadeb3695f0b9464755eee44374d4
- SHA512 752fca09371e0e228432155533a9b84f0442cafd7f25ebf0c6c2024d541fbba80882e71aee047ec94cd22c0d8114942e967652913412f5cbcf9b816c0e1fc1ad
- SSDEEP 6144:PDTWpPoPf1mNIr6ZuH9FYaGC5Y79N22RKzvqDNuwv3:P2FoPf1mNSR2vvpN8ziD8Q
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral13 behavioral14
- Target
  DroidJack/DroidJack_lib/commons-io-2.4.jar
- Size 180KB
- SHA256 cc6a41dc3eaacc9e440a6bd0d2890b20d36b4ee408fe2d67122f328bb6e01581
- MD5 7f97854dc04c119d461fed14f5d8bb96
- SHA1 b1b6ea3b7e4aa4f492509a4952029cd8e48019ad
- SHA512 957a438894a196e534af9ae1e61fb21e16f273952b55a81abb8faf0b139fc031ea940cf477f81704db417d1ce6ff2d9ddd4a2cbf316903b0e2dc1aeaef24f292
- SSDEEP 3072:pF6mb9NczTyPXoTt75AQ6oBoEfDmwFHb/1Vd23l/ODoxb7DcKK:pYmb9iz2W75JLKEfDmwTVdilnxb7DTK
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral15 behavioral16
- Target
  DroidJack/DroidJack_lib/commons-logging-1.1.1.jar
- Size 59KB
- SHA256 ce6f913cad1f0db3aad70186d65c5bc7ffcc9a99e3fe8e0b137312819f7c362f
- MD5 ed448347fc0104034aa14c8189bf37de
- SHA1 5043bfebc3db072ed80fbd362e7caf00e885d8ae
- SHA512 470323a2ee38be1b7ff8c84f1f5a5f8c4ec2ceb6b0649faa7b961f111865877dbe125409f72b1c52c7f18aa89e3469635c49ff4b83f86cc2f2eb2cc5562f9bff
- SSDEEP 768:Jirg+Y5XjlrZKpQHBSSfqKeR5r8WuwjK+imOU4MYgArhR0S9mNIHZ8LwyEOuHwIx:EAXjqrSiKm8XrQMr0S9mqH+wyEpQIx
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral17 behavioral18
- Target
  DroidJack/DroidJack_lib/fluent-hc-4.2.5.jar
- Size 21KB
- SHA256 e13070f38957fc1c063895105ab64c810a3fd8b4b6ab5d45ce2d508c8d5fa192
- MD5 5a387f6bec45cb94c7f2667c15cbf00f
- SHA1 7eda2ae9f77415cf92651191e2229eae2caf0b61
- SHA512 3d6dd064a131993a51bd66e8d100812c559365587a050a04511280092ef0cc58767bf5ca025641590c35c1b628ce20de0c56eddac63c67e4bb682ca3aaf9ed2b
- SSDEEP 384:Z4O5kHnxNasdF0L3K+N72rrGczqcg6Mx/Sjd+/kxXyV3Iu52Pw+k7ozYj:t5QrkGYeGdcgZag/kxXyVF2PdYj
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral19 behavioral20
- Target
  DroidJack/DroidJack_lib/httpclient-4.2.5.jar
- Size 423KB
- SHA256 56b4aae1bd9c66e1f890279dde75e81d226c97e302de97dafc081adeab956bbc
- MD5 23bd23d9d6327dd01fa41c12f15bf9bc
- SHA1 3bfeb9062b12d5b340445336790dbc14c59c2d79
- SHA512 e043ba153c74f65eb5185ab7e672cd7ba21cae95673b00447deb6abe0e6c4c72ae50c2ed784d020bf2558539b51f09d18e2481b617ccd887a4994adc2712effb
- SSDEEP 6144:o3rUaqSQdbq34UBXmWeM9oUxVKzvEF1Wx2FMDtwiQJ+khG/UBE14CFmDt12l:o3w2QdeI6+MpOEFs1t7i+eG/7dSty
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral21 behavioral22
- Target
  DroidJack/DroidJack_lib/httpclient-cache-4.2.5.jar
- Size 112KB
- SHA256 a67c50b74286766bdbb397088c4a78f1008d2ab17df7562db76439778c90430a
- MD5 1c3611c6b424d2ac7945ab7e6243b942
- SHA1 313cfeb950089985994736aa08885711c56b7e1e
- SHA512 9a3388b4c55a77740afe4062043cec1e863ed2f54058797311cfd6ad00b4f612eadd0c5ac743cc1be15cb8f8ada8197f638b64d0dec295c45457d011405d71a2
- SSDEEP 1536:HKVZLQaLHU8KHG5QhPc2qxOkOq3Qlum2lZhFWgM2ukFdRpFU/uFS:HK3LQaLjKmidIxOtSQwmocghDF0/uS
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral23 behavioral24
- Target
  DroidJack/DroidJack_lib/httpcore-4.2.4.jar
- Size 221KB
- SHA256 bda2b9e0464f7a0e122d5e9bff7b384f3bc3a91af18ad51e029deaaa599e5db3
- MD5 6ccb86231d8a8b99c551b4ddf926ddd1
- SHA1 3b7f38df6de5dd8b500e602ae8c2dd5ee446f883
- SHA512 0c4de4513cafb13a81bcad7cc1a4e45759ba32654eafde15665afde63a427b04ac25cfe17e4bbd1887225960b5aaf7e73382e35ec16993dbc1fd19a2bf5e8ab9
- SSDEEP 6144:mjj5oIwPj1CM0oifaJtv27fxnNibFx992P0SfMPlJ:mRoZPjuwgRNUIPTW
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral25 behavioral26
- Target
  DroidJack/DroidJack_lib/httpmime-4.2.5.jar
- Size 25KB
- SHA256 2ef409c599c532ca1e692013582695231bdb9f3956d4ec9ba3ac71300728b382
- MD5 8df1654c39f4116c9f1fcd04f8505bc2
- SHA1 6efc2f9df23c2ac4d3b701a11cab9f9fa6a641d4
- SHA512 a0f8aafeb69e1fc7616e813e30515997068faba245641c0437dc8c24f5e348ab77457b4d9cafb59a941d5dcdee187ce6d249cf313fe0d09b1b5ce3854b93d357
- SSDEEP 384:mBO5kHnxNHhVgjAV+KLz4NqO2ottK/lqEBrtxmxvH6qou3oyExBwI9F:F5QBV4Dy4NtttKdq6xmxZouUx5F
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral27 behavioral28
- Target
  DroidJack/DroidJack_lib/jaad-0.8.4.jar
- Size 653KB
- SHA256 be6ba7919a20f602703536e343860c2ae74ad18da195fd845743b877dbb379f7
- MD5 4c09aa32e036530d42319aec289928a7
- SHA1 f6617d5b95437557042e2d21f2b49121174ac80d
- SHA512 d1ee7d5d1f5c8599bfa1eaf779e29033768c92e56cc69c9d30d809ad4b41ba9bfcd616af2f8cb3b7e00bab2b2626dfc0d46b78ed072d933d200e801b70c888ea
- SSDEEP 12288:l0baMUzCKol2XKnbywMnCrR+7UZYVw7hHRNBeH3Q6dKncq:WeMUmKqoKn2RClmyYsRDqbdKncq
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral29 behavioral30
- Target
  DroidJack/DroidJack_lib/kryonet-2.21-all.jar
- Size 329KB
- SHA256 eab8c51e0e3a11bb1411ace21d9876184d5084fde82ee298da03ca0627499151
- MD5 3c05283c589306a23b8602c5bc474361
- SHA1 d906a8f689f340b39a7f78bf9b4474aa819d7391
- SHA512 1aea27eb1b029ae1773e7b0ffebab51de79ee8746762ba153c4b20fd23b4c59f7c96804a08cc654b5ab9dc2135db14bccd69a6fe69e5677c3bd639f3176fc74c
- SSDEEP 6144:TuCLxaF2a4FlrHUuOG8RhoSPPN9NO/G+yspLXbCjL:Hc25UVHVO/Hl3Cv
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32