b9a818cd978bf645392d3b01aec56b20140bb95eb77a27b2497ec5c311823a3d | Triage

Resubmissions

12/06/2024, 13:04

240612-qaywmswblf 7

Sharing

Copy URL Twitter E-mail

General

Target

a0c486b879e20d5ac1774736b48e832b_JaffaCakes118
Size

555KB
Sample

240612-qaywmswblf
MD5

a0c486b879e20d5ac1774736b48e832b
SHA1

13e1d24c828421cf6d2342a57ce6f9aa3f40a44a
SHA256

b9a818cd978bf645392d3b01aec56b20140bb95eb77a27b2497ec5c311823a3d
SHA512

f446565b189b1126770246662a8d82d7639bf24c7c4ddf8d6bfdb439d5ef86bf7f3b26bb5479cffd3d6bbe43e2e569e796433b908da861dcac5f97248e8ad9b3
SSDEEP

12288:rJOBYSa71TxwjNR1CmYG8m+izHMWbH0w7/w4aA:rJrSa71NANR1im+u7v7naA

Score

7^/10

android discovery evasion impact privilege_escalation

Malware Config

Targets

- Target
  
  a0c486b879e20d5ac1774736b48e832b_JaffaCakes118
- Size
  
  555KB
- MD5
  
  a0c486b879e20d5ac1774736b48e832b
- SHA1
  
  13e1d24c828421cf6d2342a57ce6f9aa3f40a44a
- SHA256
  
  b9a818cd978bf645392d3b01aec56b20140bb95eb77a27b2497ec5c311823a3d
- SHA512
  
  f446565b189b1126770246662a8d82d7639bf24c7c4ddf8d6bfdb439d5ef86bf7f3b26bb5479cffd3d6bbe43e2e569e796433b908da861dcac5f97248e8ad9b3
- SSDEEP
  
  12288:rJOBYSa71TxwjNR1CmYG8m+izHMWbH0w7/w4aA:rJrSa71NANR1im+u7v7naA
Score

7^/10

evasion impact privilege_escalation discovery
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
- Tries to add a device administrator.
  privilege_escalation impact
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Device Administrator Permissions

Defense Evasion

Download New Code at Runtime

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Account Access Removal

Tasks

static1

behavioral1

evasionimpactprivilege_escalation

behavioral2

discoveryevasion

behavioral3

evasionimpactprivilege_escalation