ce5cbb262f0bbed9021cb414d726554ec8d40d0449e7f0913c2a219ae65fdbc3 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
b5809b75efc6cbab88b055ee9213c823_JaffaCakes118
Size 23.6MB
Sample240616-2elyesvfpp
SHA256 ce5cbb262f0bbed9021cb414d726554ec8d40d0449e7f0913c2a219ae65fdbc3
MD5 b5809b75efc6cbab88b055ee9213c823
SHA1 33d8f5015937a2fa363a7b4f3a7af6a32e3b5c4e
SHA512 e4ee155f7cd9802a4f0792524708922703554cf11c95c5205362b1aec523ed340664f5a3a5200be3ba08cbe4d1139582a79265e328e64171b04d5753e203fcc0
SSDEEP 393216:SZQFcqutlgCjMCtV6fDJbgJ01roqzzp5Vy9Dhm+tnKPlU2RxET74CVeIhMg2G8Ef:acb+l/MsAfFb2kr52hvtKCuETJVeQMFe
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

android discovery evasion impact persistence

Malware Config

Targets

- Target
  b5809b75efc6cbab88b055ee9213c823_JaffaCakes118
- Size 23.6MB
- SHA256 ce5cbb262f0bbed9021cb414d726554ec8d40d0449e7f0913c2a219ae65fdbc3
- MD5 b5809b75efc6cbab88b055ee9213c823
- SHA1 33d8f5015937a2fa363a7b4f3a7af6a32e3b5c4e
- SHA512 e4ee155f7cd9802a4f0792524708922703554cf11c95c5205362b1aec523ed340664f5a3a5200be3ba08cbe4d1139582a79265e328e64171b04d5753e203fcc0
- SSDEEP 393216:SZQFcqutlgCjMCtV6fDJbgJ01roqzzp5Vy9Dhm+tnKPlU2RxET74CVeIhMg2G8Ef:acb+l/MsAfFb2kr52hvtKCuETJVeQMFe
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

impact persistence discovery evasion
- Checks if the Android device is rooted.
  evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries information about active data network
  discovery
behavioral1 behavioral2
- Target
  1
- Size 70KB
- SHA256 d320347a935fb3a98ac3858cb55a9193965cd5f9b04ad97838fb493c612d1010
- MD5 fbc9ad99563091d07cfdfaed823bcf3b
- SHA1 906f5b3e984ddec5208bd01468901cd0262cc1e9
- SHA512 ea259833bf55b9174f55b84ab62aa9a586287e0c1375f266668519d8ee273c7fb5c7419cdaaedcf1ea40c758531a65353d5c2a3083858d7c65f553b1f80149c0
- SSDEEP 1536:G/r4GPUEMPWEX/TnT6X+VVjPoyWtJvndg94iB9e/euL8y+pl+CJhOw9jYx9PvP7m:uhJDEvbTBDjATtJvnmCiS/eNPpJnYDPK
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3 behavioral4 behavioral5
- Target
  21
- Size 2KB
- SHA256 43919275b8694ddc0de13559603d2b8fefaf80aaab7a596d0617e324dac130af
- MD5 81b45de6a47986d607e660539f02e21f
- SHA1 d2f1961e00bc48dfcbbf76a3d5648544e5812afb
- SHA512 7e99792b4d6e6f0f35b4966a934942a1658c6eb27341905cda65adfc5d8aa496c33229f3bfdfeb7fb8a047e603bcf5463efa34c233800df723b26943f7c28466
- MD5 SHA1 SHA512
Score

1^/10
behavioral6 behavioral7 behavioral8
- Target
  9
- Size 5KB
- SHA256 15c5291d63d9425aad8a2374804589ae6a0d377af59319715f35e09bd7fd1674
- MD5 07e7f8974d3ebde93b2d85aca8d96470
- SHA1 72afb51e234cb6f6b99c50739b2b73d0182d78e9
- SHA512 cab58123d458d3b37880569b5e6b40dfd711a4ce259a17292a02935c885866e440704f8075cc2485108c425b79ff7fd032fd7bae6f09264fa5ec9de204a61a54
- SSDEEP 96:V6EGSIRn2mSbFEYot7BvfZQ0ITJzeUWwuN9GxZJ3qbbjPHpEwPF8L8Tj+pu4:8EGSqZSbFEYotJ+0I1zHWxD2ZJaPjxEj
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral10 behavioral11 behavioral9

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Download New Code at Runtime

Credential Access

Discovery

System Information Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Tasks

static1

behavioral1

impactpersistence

behavioral2

discoveryevasionimpact

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11