bea4aeb462895070d47046f5a49f633757f5021162a29c06979b1a2919e25820 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
a1101ebcab95bd158d4aa28819d51fc3_JaffaCakes118
Size 18.8MB
Sample240612-salbnashkr
SHA256 bea4aeb462895070d47046f5a49f633757f5021162a29c06979b1a2919e25820
MD5 a1101ebcab95bd158d4aa28819d51fc3
SHA1 b0f77d264d5f3793b4d857f637e1ba99747e1650
SHA512 936c29843a1131a751036934a09cbb9aa388f6c862a02ac9a2d2da15ec7f33bcd31ce9dc5cd7319629889e308d1d4530fa63d5c8aa9b3172f12ce310390b07c2
SSDEEP 393216:BDNgNOMwDoj+8JN2ltGDH0FOeMLB/NFy9U0J3f:BpDcI6e0lyB
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

android discovery evasion impact persistence

Malware Config

Targets

- Target
  a1101ebcab95bd158d4aa28819d51fc3_JaffaCakes118
- Size 18.8MB
- SHA256 bea4aeb462895070d47046f5a49f633757f5021162a29c06979b1a2919e25820
- MD5 a1101ebcab95bd158d4aa28819d51fc3
- SHA1 b0f77d264d5f3793b4d857f637e1ba99747e1650
- SHA512 936c29843a1131a751036934a09cbb9aa388f6c862a02ac9a2d2da15ec7f33bcd31ce9dc5cd7319629889e308d1d4530fa63d5c8aa9b3172f12ce310390b07c2
- SSDEEP 393216:BDNgNOMwDoj+8JN2ltGDH0FOeMLB/NFy9U0J3f:BpDcI6e0lyB
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

discovery evasion impact persistence
- Checks if the Android device is rooted.
  evasion
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Checks the presence of a debugger
  evasion
behavioral1
- Target
  BannerPlugin-1.1.apk
- Size 21KB
- SHA256 a01589dfc51692dbc4a5b8231a48ff3057e457dc22d30f6516af8a3ca63e59d4
- MD5 e8c3a06470661115c3c884e5ccae5307
- SHA1 a5b0956d22e31cbad02f8ea35828b0aad776469a
- SHA512 93ccebdd3df7beecfd84d008edcee893a120b3a3feabf637cb165cd5c6a1b50d1841ea4205871b41788bdae858aa28157fe118aa0c9c9705c5e738d9d1bb213b
- SSDEEP 384:5yyQxUgqTfEIFpdXNxY38xPyUzwGaEUl56xDSr62pTGfsaftcTFhsIldVv8:5yyQqgqT8It03WP8PQo62pL8tu8adx8
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral2 behavioral3 behavioral4
- Target
  CommonPlugin-2.3.apk
- Size 592KB
- SHA256 6e93ceb0476209bbd50574052bd9c3f8873e70cdfe1aa40349b87015a11cc2cb
- MD5 7cf3f7572af3e66f0dee823c37af5386
- SHA1 a8c74d683b80eeffc17ea0a7c25a0778370bdb62
- SHA512 85f2815af544bd3fbcd0ebd42f502d99263eda3cf811e7adcd398f7d75bc20841a53a669937ff662398abba94dea2a32b1c9959827be5e5d364a7aa581e73382
- SSDEEP 12288:aZnfSPn3oeDa6AlAWVgLhW5Ws8W/5v+LjcCc5LmN09CjgcZ:SKnw3AWVgLhW5Ws8W/Fq9YCTZ
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5 behavioral6 behavioral7
- Target
  ContainerPlugin-2.0.apk
- Size 54KB
- SHA256 0527e9885c676bc2d7409e2cec3e6d0091e49f11453624bbaa0250f100141599
- MD5 d85f2d18350bf7f0c3784cb161251e04
- SHA1 e8d55a5ccbb617f39ef7a148e333db2a4b09d950
- SHA512 0b91d91d5fb45fb24b49e4e374adbcf77a7d4058d6a47d612d9c74b23b344da6d8ffe75ab5602ec65066b035f3f2a90fed179d394ad8071eda4aaa4a635b1ae5
- SSDEEP 1536:B2WL16cYG9cdF5MYLIXCHZrTVXVAe4AcpsLkkq:BZL1YGnVkZrTV6bpsLvq
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral10 behavioral8 behavioral9
- Target
  DMB_1.jpg
- Size 381KB
- SHA256 2dd5f6035434ac7c711f5acf27244473fe4b5083f121c967f440e25442eaa65f
- MD5 28729550cf84e24c689185725595b901
- SHA1 5de3d39080c31cdb9263ee38e7bd2229d93c2436
- SHA512 55e89c9c078955014f0a254be24afab4f6f4277bc6ff96a281618ba2a9837091dd10cf4430c8ebe141ec659f06adfbbea1dea90a7d9a1d30cbc316164aedce2e
- SSDEEP 6144:Mfednz5zJd1PLo58+DtcLzT6dHMkvAeCdeb9hwOkb8b0nzzwD7QEcTAe/OgzsoOy:M6ndddhLoe+D6iJMkvAeCdeBhf6jzzu2
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral11 behavioral12 behavioral13
- Target
  bdxadsdk.jar
- Size 184KB
- SHA256 7fd095f1f1ace3d5d991983c6e546e8e140b7d5e9e05f1fbd09428a200fff75d
- MD5 42743cd25c9e512e5e10c910987acaaa
- SHA1 4636f14dd07e4c7a0f331de24f5773fe53f753c8
- SHA512 f47093757326da5f67e944035ebdefe04f3fa180639e08aa34768d0024aded7e9c99bb5b60b9b8447b972baad75943a67f449cba9b73bc6734f0edbb204c9132
- SSDEEP 3072:/xzT+5M72vv1ECi9Rt5zHpPFOqHVPZoLhnLPsn+Dtc8ymU7PeYdJ14rkFn14zepH:/RS5M7Kvzi9z5zJD1PZo5g+DtcYUbPdN
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral14 behavioral15 behavioral16
- Target
  DMG_1.jpg
- Size 464KB
- SHA256 912455b3ecd1a24083b4a8ad86754f25cd06f314e261457424fee0f52d9f95f8
- MD5 d07b440dc938036a96fa1b55bc5b8080
- SHA1 c802e799450f18c4ef74c793860042bfef5c47d0
- SHA512 f45c9653e74bb12e126dba7d42c771faf58b76841dc1c362c409256b8356c3632422da08294e1f04fa907478db4a2636d6910efb4b8a198db3be02ffaab258b8
- SSDEEP 6144:6Og9/viepEtXMoaeh2YIxCA+wPw93ukh9CHu/AdSmAOZsLK8wA7IWmle:6f3fEkehYxN2Ikh9bYUO4n8WEe
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral17 behavioral18 behavioral19
- Target
  gdtadv2.jar
- Size 420KB
- SHA256 0906bca7332f10d1bdc98b04eb5ad9de2af5da0590b5615aa5f66852b78d9369
- MD5 f0ee7f7dd1ef4e5cd436ed6e1c609e5a
- SHA1 7d112abb7896294b075721b0200f0812ed65a418
- SHA512 5912538f74fcbe24bba5e3eef2804fd160ccd002bf144e30dd910c9d52d6a3e2dc172a3baa1f6d64ed93346a9b1d4760ae17ec6d1c7c8a4de8cb9264b82bf2be
- SSDEEP 6144:mQCx8Rp2KiQB/B4Qfdw3Vr/+rwWTLAUq3PwB32k59CruFIBSSAOC8hkIwx:ok/z/BJfdUW8W8ho4k59tSaOCckIS
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral20
- Target
  FeedPlugin-1.1.apk
- Size 40KB
- SHA256 3d185a50ca9a66f562bd7150d2da2ee5e6b6dc3357958ae97e297d8adc8651a9
- MD5 8c183c347ddd6dd49654c365c830e492
- SHA1 51fad4381715d614d327ca2d4cb4ef27337dab61
- SHA512 eabf6eb597fe9ae581e21d2eed07e8a7cc48c19b8e6e8a78c4d6bc997a2a22d97cf0b001f7d289584128808b6b8febe4f056e2110b247d2a8edb286b06bcc851
- SSDEEP 768:kb8azqVJn3ynARvLmBoslN6Ut2GWyWE8YyXh:kbxMoARvyBosfyyWh
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral21 behavioral22 behavioral23
- Target
  FrameworkPlugin-2.3.apk
- Size 17KB
- SHA256 e43c9fa6c23680111be0f0fb75886862ebeba992736a02e6ee448196803c1a77
- MD5 13125a9716f1bde717c29b1cbcc1152b
- SHA1 8aa72bbc5bad951959495ea22e7ec759a99b01b0
- SHA512 e823ba64699491a7de31907552c89e48eb2e77e867d9d19ef9639fb11f23a2b93fe7af43d26b919a136ee7a7ecd22a26374ec8f29070c432c7af3d4d3020713a
- SSDEEP 384:5UX29se/3VxjLPKMpe9jWUdt2YpGM83AqoZuFeX+JVXuIjw48S:SX29n/3njWt/83AqHFfH8S
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral24 behavioral25 behavioral26
- Target
  TAEPlugin-1.0.apk
- Size 836KB
- SHA256 1db3d26438b037bb53f8eb1e02330ef8562b7d958792e902149af722e0c4ac96
- MD5 5e053943189080f7e5d801ddabb5a6bf
- SHA1 24fa6e10a01f53bd3f59b0676ec78d01f4427a42
- SHA512 9f0906e4f265c14519dfc2f77d8019f2f6d08a81c45e09bee449fc72ced4fc192f3bcef969162e829bf7a477786a2bed9da693124e018748cbe71d5eb8dc4589
- SSDEEP 12288:XHHYgoSeo6PqjZ2lZE8GD+qdMS3rxHDQGOADySPPlzXt0ZRtcPSk1ySST3Dgz5o:XYKV6w8ohtzDBhykBXt0KSk1MT3Deo
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral27 behavioral28
- Target
  wpplugin_2_0_6_0.jpg
- Size 2.0MB
- SHA256 30a3ee380a4cdcf731a2faa08960253fde9b7f19f46daa4360db52df35198cef
- MD5 261c6e48efe10ed980def8007f6d1f94
- SHA1 db5db4948f4edf3427eaecfddf8f724ed910b28f
- SHA512 4c5ead22d3119825bf0feddeccb59b664dbd0e94f908ffdf8bf3e9308ab14dbbebb6ec13fe5c53fec917468786abfe6d6bd11ad89964e91e6fcc6c3706a63a7c
- SSDEEP 49152:XjkYFgnmgDNXcqWH2v7cHLLUZmMHJs/9JnHTFlkvCNXy+v:XjnamghXNa2v720Zm2Js/DHTbtv
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

discovery evasion impact persistence
- Checks if the Android device is rooted.
  evasion
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
behavioral29

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Tasks

static1

behavioral1

discoveryevasionimpactpersistence

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

discoveryevasionimpactpersistence