5b3e8db75f275503a6aa284d0b9863368627b6f1f7a54371c921b9f2c7f531ca | Triage

Sharing

General

Target

9c4cc5e9207e4012dcbfa95b23623b7d_JaffaCakes118
Size

30.5MB
Sample

240610-3gxy5svelb
MD5

9c4cc5e9207e4012dcbfa95b23623b7d
SHA1

ef29ee76a33600dbd5ba623007a5d0afaf302c11
SHA256

5b3e8db75f275503a6aa284d0b9863368627b6f1f7a54371c921b9f2c7f531ca
SHA512

5fd254dcae2afe9b7ce16e109661d32c2018d6999b073e524f19449d86bc882d66621c189c5e8f74802351f725514021509168c83f7f98b235bdf184e0a65cf9
SSDEEP

786432:umKWJiizeX5RAE9ClCL6MlswAbJp2PCUa4:zKIh6X5R1z6MlswuvTUF

Score

7^/10

android discovery impact persistence

Malware Config

Targets

- Target
  
  9c4cc5e9207e4012dcbfa95b23623b7d_JaffaCakes118
- Size
  
  30.5MB
- MD5
  
  9c4cc5e9207e4012dcbfa95b23623b7d
- SHA1
  
  ef29ee76a33600dbd5ba623007a5d0afaf302c11
- SHA256
  
  5b3e8db75f275503a6aa284d0b9863368627b6f1f7a54371c921b9f2c7f531ca
- SHA512
  
  5fd254dcae2afe9b7ce16e109661d32c2018d6999b073e524f19449d86bc882d66621c189c5e8f74802351f725514021509168c83f7f98b235bdf184e0a65cf9
- SSDEEP
  
  786432:umKWJiizeX5RAE9ClCL6MlswAbJp2PCUa4:zKIh6X5R1z6MlswuvTUF
Score

7^/10

discovery impact persistence
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
- Queries information about active data network
  discovery
- Reads information about phone network operator.
  discovery
behavioral1

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

Process Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Tasks

static1

behavioral1

discoveryimpactpersistence