e0b29e310a24be501b3ec504c3078f45c31a234836529250bc2932ba4cae2bfc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aeb4cd61faef87a7d58ee176935041ac_JaffaCakes118
Size

31.2MB
Sample

240615-q2wwcswglk
MD5

aeb4cd61faef87a7d58ee176935041ac
SHA1

c8d4b46b5dc10406c5018fe6f1c4e6e86189da16
SHA256

e0b29e310a24be501b3ec504c3078f45c31a234836529250bc2932ba4cae2bfc
SHA512

3d8b35d1ce123baf7515468a171f6f8f80009a2de59099d9b170157e1843d6e76c9920b8b48f2cb1b79a5500b102fc1b7f94523ca8088336c1430ebfc01153f7
SSDEEP

786432:mhO2muKDP3AbHgTlC4gl3CTABxqoOajOpEwCGaa:j2Qr+4QhxSakEwCGP

Score

8^/10

android banker discovery impact persistence upx

Malware Config

Targets

- Target
  
  aeb4cd61faef87a7d58ee176935041ac_JaffaCakes118
- Size
  
  31.2MB
- MD5
  
  aeb4cd61faef87a7d58ee176935041ac
- SHA1
  
  c8d4b46b5dc10406c5018fe6f1c4e6e86189da16
- SHA256
  
  e0b29e310a24be501b3ec504c3078f45c31a234836529250bc2932ba4cae2bfc
- SHA512
  
  3d8b35d1ce123baf7515468a171f6f8f80009a2de59099d9b170157e1843d6e76c9920b8b48f2cb1b79a5500b102fc1b7f94523ca8088336c1430ebfc01153f7
- SSDEEP
  
  786432:mhO2muKDP3AbHgTlC4gl3CTABxqoOajOpEwCGaa:j2Qr+4QhxSakEwCGP
Score

7^/10

banker discovery impact persistence
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about active data network
  discovery
- Reads information about phone network operator.
  discovery
behavioral1
- Target
  
  amap_resource1_0_0.png
- Size
  
  24KB
- MD5
  
  94a2a5f84a3fd6f0fd9134708ae1b81e
- SHA1
  
  1e21afaa48ed86cb31aaf7b17c3514315364cc99
- SHA256
  
  fc0c21884d4edfa4d93282139a309f204b27271a111a5b158edbc048f730b461
- SHA512
  
  24a175d15cb5cf8d23f0d53b004ed5c9a47646129c816fcae1b46aedabd95bb2c6dd2958d39d6f98f36dec3cd55d6af2d9b8f7013ced4b37a30db566e9a44923
- SSDEEP
  
  384:SevEWnTSCwukBdJ4dVCHyP7MPi3oqYXgnJk:3vEWnSue4+Sf3opQa
Score

1^/10
behavioral2 behavioral3 behavioral4
- Target
  
  autonavi_Resource1_1_0.png
- Size
  
  1016KB
- MD5
  
  ca416b9a195afd3fad887b83b5c4338e
- SHA1
  
  3c2fe205b7c4daa8eba4139fdfd4a88c46b135e4
- SHA256
  
  eefa1beadbd54e830187eec627b1145767a223a75e0a51142b809adff26d6e73
- SHA512
  
  612f6d24c7b2e85f8a41648df6a2256204363c9d6195f738ad15e2c7c0bd9993d4c24c27cf1e006ad8637274ed35d916ca251e1d7c2704861ce5e758e4ff337d
- SSDEEP
  
  12288:qXo3+VPNODQ/zDuXUE3bc6vf6Sk42buEkB2yU5F3v:yMEO8/vxELc6vf6yjLwyUPv
Score

1^/10
behavioral5 behavioral6 behavioral7

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

Software Discovery

Security Software Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Tasks

static1

behavioral1

bankerdiscoveryimpactpersistence

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7