3ddeff55d9493fba2969d6529fb7bf58be3b94041c53b9dca146a68fc06d0bfc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96331dac335b2a43736f02373e6c395d_JaffaCakes118
Size

11.1MB
Sample

240604-zkgjsaah3w
MD5

96331dac335b2a43736f02373e6c395d
SHA1

b9ab45c4444755e85a09d34253c8601e50a29269
SHA256

3ddeff55d9493fba2969d6529fb7bf58be3b94041c53b9dca146a68fc06d0bfc
SHA512

2c25938accf774460f2abda1700de666a0c7f1b0ade5cfb07046222c7cfbe3aa4517a5739bcbd69020bc86404835ed2e0c17dd0c5e19e99adfde382eaca988a5
SSDEEP

196608:qqbSFO57ScPoY8miu1PFTYvKq1WR+f3U0RNnlQu6mKytc7Ub61SruBnJZMst:BmFI7Sqcmiu1PFTYvloR+vU0/nZ4FUQ/

Score

7^/10

android discovery persistence

Malware Config

Targets

- Target
  
  96331dac335b2a43736f02373e6c395d_JaffaCakes118
- Size
  
  11.1MB
- MD5
  
  96331dac335b2a43736f02373e6c395d
- SHA1
  
  b9ab45c4444755e85a09d34253c8601e50a29269
- SHA256
  
  3ddeff55d9493fba2969d6529fb7bf58be3b94041c53b9dca146a68fc06d0bfc
- SHA512
  
  2c25938accf774460f2abda1700de666a0c7f1b0ade5cfb07046222c7cfbe3aa4517a5739bcbd69020bc86404835ed2e0c17dd0c5e19e99adfde382eaca988a5
- SSDEEP
  
  196608:qqbSFO57ScPoY8miu1PFTYvKq1WR+f3U0RNnlQu6mKytc7Ub61SruBnJZMst:BmFI7Sqcmiu1PFTYvloR+vU0/nZ4FUQ/
Score

7^/10

discovery persistence
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Reads information about phone network operator.
  discovery
behavioral1 behavioral2
- Target
  
  UPPayPluginEx.apk
- Size
  
  623KB
- MD5
  
  41d8ef16b50ebe6e2f6af0cf98ba4de9
- SHA1
  
  7bc3f4d9ec80fcc490f2299cc87cae21f396549e
- SHA256
  
  3afada853d8c0b257352ee81659ef426c9b6256cc8d9934c5d018be27667d52a
- SHA512
  
  b913bac66e84def8a9aaa268732fefc9045673152f451ab555bf09f8e9ec0a74bfededff2dcc92c3d39682ef990c4acbe83237f0e4c01ed00c52e225dce80966
- SSDEEP
  
  12288:RjEfQf5pyq98O16dp8qvOIzARKW+BanJa5ScsdS3wrCiRBsffLbHQ0DEmP7:1xhpd85gqvjaxiScsowZsfXQ0DXP7
Score

1^/10
behavioral3 behavioral4

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

Process Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

behavioral3

behavioral4