810377aec8c8a795b8338736aeecdf3e681f0fbf3b9755d213c7a03dcb87d9eb

Sharing

Copy URL Twitter E-mail

General

Target
99cb54c8251809a995e1ebe8ae984bc6_JaffaCakes118
Size 17.8MB
Sample240606-cryqbaff26
SHA256 810377aec8c8a795b8338736aeecdf3e681f0fbf3b9755d213c7a03dcb87d9eb
MD5 99cb54c8251809a995e1ebe8ae984bc6
SHA1 78aacd7d2218a53534302efb473e83706533cd36
SHA512 ac17e028327aec5fcbe93bbe34cc79a1805ad1245b15fea2d6e6d56d5a26c63633f0664b1366a6b638526262862c74efa497bc089c43e2bb19b6794a9f0042ad
SSDEEP 393216:AXUrTlHfwwP6tlbSE8yRp3VOg12TcHAOjzB9bCzvg:zrR/FCBnRpAgoYH9jzB9bCzvg
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Targets

- Target
  99cb54c8251809a995e1ebe8ae984bc6_JaffaCakes118
- Size 17.8MB
- SHA256 810377aec8c8a795b8338736aeecdf3e681f0fbf3b9755d213c7a03dcb87d9eb
- MD5 99cb54c8251809a995e1ebe8ae984bc6
- SHA1 78aacd7d2218a53534302efb473e83706533cd36
- SHA512 ac17e028327aec5fcbe93bbe34cc79a1805ad1245b15fea2d6e6d56d5a26c63633f0664b1366a6b638526262862c74efa497bc089c43e2bb19b6794a9f0042ad
- SSDEEP 393216:AXUrTlHfwwP6tlbSE8yRp3VOg12TcHAOjzB9bCzvg:zrR/FCBnRpAgoYH9jzB9bCzvg
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

evasion impact persistence
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
behavioral1
- Target
  gdtadv2.jar
- Size 88KB
- SHA256 e365ac88dc01033ccf02fe965d5e1eee9044c4ca1a3d9d96085be6a427a5274a
- MD5 0586f3074966b353fe050ec4055ca09c
- SHA1 645839dc107ba400711b8f4d8e4495dc29ac8ee0
- SHA512 e76d878ec99c64cff35a11a5837237206bb02b1cc2d35ff2c0f03c72519bc19813138f54a6aca6c775b33de532a011dee7949ecddb7b57e4264380d70b81e4a5
- SSDEEP 1536:ZIyPme+AtVhpPhvh8Ba1e6Z5KgXJMfl24RnuFo398/FhluO4HyafAtQOz672r:9OefrzPhyh0KgXJ2l2nqt8/FhwfWQ1y
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral2 behavioral3 behavioral4
- Target
  patch
- Size 2.2MB
- SHA256 4fef18a19ac2625a353e3d9ccecbce3fedb5a71925b7419a5752dc8c02aafd4b
- MD5 4fbbfb5f86156ed67af4d6c6a4f3bb99
- SHA1 cd0912603a759b9e74899ada8b18aa418c278b28
- SHA512 e14edf5a79f479c5c69fb3593d16ed64dec7b8f2c6ebbd8bbdd8927ff06ab9447d7c9e8ff6759b3e569dd414702a7396cc2f37dfb8845293754cd0ee01c28736
- SSDEEP 49152:DNWLhHfBFhOTYW37pFzVBNAH2MNC3lcPjZNgj8bHe/Fy9:I1hO8W37pFHH3y7Xgjcr9
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5
- Target
  __adroi_core_remote.jar
- Size 62KB
- SHA256 1baa81a00ae4aa4a65c74472bf1807a49f1777fd1c5da60139904f86855aff5a
- MD5 4b0b2048597edd1393e8d1d8fd70b12e
- SHA1 6a9bc678ccdffb689fcf67945b488372712287d5
- SHA512 14f0f2bf506e6a04898a705f496e63c7d1c8adad789058d4d8891de44c05327998ef3623060bcb96d201db851cc56df8072c1569acd668e8a2487850f836a7b8
- SSDEEP 768:5iC1GhP5KojgsjUqlToU46G6GOAjB+NjImS2jcLixbjcUZpRA/yYrhtgfi4NhJHQ:A5jL3lTw6+V8NjtPjTm6A/yY/YT5QIm
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral6 behavioral7 behavioral8
- Target
  org.apk
- Size 939KB
- SHA256 e6311069b70167ac372aa7bee7b761558bddac21fd7bb7b75dbc188b51452eba
- MD5 c0a611a3caee4d6b7898d848fc5cd2ba
- SHA1 2949a2fd9ef8efafab26cb83dccb4ed15959c1e8
- SHA512 6b4b1ab993277aa3552a82859fd242abe91f3da67566d07dd80f5e06709898958a72c1e6e63dc43a28734d375e7ced5ef97bd25084394f9f3017b355adb4fe84
- SSDEEP 24576:rUY27MUjeKvZH6h5ebKypypYN7HXrexV2JNQssh5:AzIUjjvZahc3XlexV0zu
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral10 behavioral11 behavioral9
- Target
  pujia_c
- Size 333KB
- SHA256 513709879438a0931cc3f16c7c784f19100ead23f027b22c352e2be4c972436f
- MD5 211e2d9dcc3034c822c1db83003ab7db
- SHA1 f6becc9f1c1d7b1d5c0254171f5645a2f4f4eb66
- SHA512 f8913981acc20bdadd983941efcf93aedbfce3881b17636be547b59a0c06c14cb60c675f5ad91c1a39ce2d040259b490e7c55c055cd0ae9515d045e9c9afe5fb
- SSDEEP 6144:GlutBErfT4d/YfYu7dLAn8vKPMctfnhhMRtw6OZZqL4YplVJCwlJjHOMgT:G8t6rL4dwXu8vKPMGhOrw6OAtJXLapT
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral12 behavioral13 behavioral14

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Tasks

Sharing

General

Malware Config

Targets

Loads dropped Dex/Jar

MITRE ATT&CK Mobile v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14