83b254c4d66a794d3a72f2860f8424e329e5549d62e712300085f1503e6e3a10 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
9ea300a2f8ed4a0656403b485c6c903e_JaffaCakes118
Size 31.4MB
Sample240611-stecfssckj
SHA256 83b254c4d66a794d3a72f2860f8424e329e5549d62e712300085f1503e6e3a10
MD5 9ea300a2f8ed4a0656403b485c6c903e
SHA1 b9b0e56d3d17dddc006aff723dcf362c2e22e719
SHA512 b4273179dbb2d2a2bff2139c70d031f3bbaea3f976d8c073687167644cbc6f74e0be7825150ee4226e9563b58cf6637db4841d3d7c78b1b9e5389b53411dc767
SSDEEP 786432:W7MIFV6NgRJpaHA5VS7G/xBaXbTnEF04F47KUlZw94iywT9XOOj:OgrtjXbTnZ4F47NlS75XJj
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

android discovery evasion impact persistence

Malware Config

Targets

- Target
  9ea300a2f8ed4a0656403b485c6c903e_JaffaCakes118
- Size 31.4MB
- SHA256 83b254c4d66a794d3a72f2860f8424e329e5549d62e712300085f1503e6e3a10
- MD5 9ea300a2f8ed4a0656403b485c6c903e
- SHA1 b9b0e56d3d17dddc006aff723dcf362c2e22e719
- SHA512 b4273179dbb2d2a2bff2139c70d031f3bbaea3f976d8c073687167644cbc6f74e0be7825150ee4226e9563b58cf6637db4841d3d7c78b1b9e5389b53411dc767
- SSDEEP 786432:W7MIFV6NgRJpaHA5VS7G/xBaXbTnEF04F47KUlZw94iywT9XOOj:OgrtjXbTnZ4F47NlS75XJj
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

discovery evasion impact persistence
- Checks if the Android device is rooted.
  evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
behavioral1 behavioral2
- Target
  bdxadsdk.jar
- Size 195KB
- SHA256 555e565b45d2b030652d914830ad427d15182797886316024a2f04df6ac81d5e
- MD5 c3b999326b7187bdd85fd971f93376d6
- SHA1 978fa76710506b2aa2dc1502e2697355cc64e34e
- SHA512 240981a457a3df5ce7f51ae1e0b323efc37b349a261e21d52ef8e9256d758f5c7dd4bcd6411ca2dc247de1beec2ad1a0f7f49d2370971c8c65f95b0d6c14b31e
- SSDEEP 3072:bFg/OTNG1obNXB45vAEsreszccGiXzU+wtBJPkyzy4H/mqku/DjEWKVQNCDu:u/Ow+x69ftc9XzStBJ8y5mqkYDjv3Gu
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3 behavioral4 behavioral5
- Target
  dynamic.jar
- Size 77KB
- SHA256 30dc2977fd546fbf324bba7cc218424c2cd1aba0f70783f4a4819984125e2c90
- MD5 79b01642cd37e97bb4bdc559c70d2f24
- SHA1 6432046a8ddac21eb158f382c3200c09e64fddf4
- SHA512 a9fb7274357581ac54c48c22a22db5fd7fd298e32c30f6c0a5461cb65123b13245f6206cd756f80248ee1f9b4c2a1871251dcc62214971bc66a2ad3d66e44d06
- SSDEEP 1536:FOEAI7LwNe++XmZuE+vrnV6tuwtONSaKLR7jPQyBoHBICDxw6:FO0Ie+4mZunvJIVQ8aeRXNBkIiw6
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral6 behavioral7 behavioral8
- Target
  gdtadv2.jar
- Size 230KB
- SHA256 c6a8f2838c910a50b56bddad227ebed00b8b32a6869a432c83964b1150ad2c59
- MD5 33aeb27eefc5ae7838f01186e27d8816
- SHA1 2a7ef64266577916f05cc841c9f977ca8a34568f
- SHA512 ebd8ccc5750aa1c2a28e849149d0ef3d1c997479008a803a931ea10c82bd99d90797a99329690cbea6cbc18d45bbe481a5576abfe3ca8afc96dbb3974a0e00c5
- SSDEEP 6144:B8Obhi9RAdTKqZVGee8QXMLzKb/n4BQk+m:BbhiTAEQeVsWrn4BUm
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral10 behavioral11 behavioral9

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Download New Code at Runtime

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

Process Discovery

System Information Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Tasks

static1

behavioral1

discoveryevasionimpactpersistence

behavioral2

discoveryevasionimpact

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11