ee1f2de13664e3125ec6eb0e87b9c6f01d7ba029edc7622edfb53d3ac44a6946 | Triage

Sharing

General

Target

b77b61be84a76dce4361db1ff21904e6_JaffaCakes118
Size

3.0MB
Sample

240617-jphpms1cqg
MD5

b77b61be84a76dce4361db1ff21904e6
SHA1

eb882b677b78fc2e67baf55b5a422a9b0c6b79bf
SHA256

ee1f2de13664e3125ec6eb0e87b9c6f01d7ba029edc7622edfb53d3ac44a6946
SHA512

e02aa823669a91ed97d3eb9147993c3e63c7c6f886ad0e48d38af91766cd27e2c1bc239ad133e11ff55b4d130ef50477c4cc5a9adc551463102e218bb1fadb3b
SSDEEP

6144:9YzpSax8WzKS/g1l19A5Gbj6oesjsi7wjftdKd+pDO3QP:9YzYrPS/g1lnA58bjtwztAcpWQP

Score

7^/10

android discovery evasion persistence

Malware Config

Targets

- Target
  
  b77b61be84a76dce4361db1ff21904e6_JaffaCakes118
- Size
  
  3.0MB
- MD5
  
  b77b61be84a76dce4361db1ff21904e6
- SHA1
  
  eb882b677b78fc2e67baf55b5a422a9b0c6b79bf
- SHA256
  
  ee1f2de13664e3125ec6eb0e87b9c6f01d7ba029edc7622edfb53d3ac44a6946
- SHA512
  
  e02aa823669a91ed97d3eb9147993c3e63c7c6f886ad0e48d38af91766cd27e2c1bc239ad133e11ff55b4d130ef50477c4cc5a9adc551463102e218bb1fadb3b
- SSDEEP
  
  6144:9YzpSax8WzKS/g1l19A5Gbj6oesjsi7wjftdKd+pDO3QP:9YzYrPS/g1lnA58bjtwztAcpWQP
Score

7^/10

discovery evasion persistence
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Queries information about active data network
  discovery
- Queries the mobile country code (MCC)
  discovery
- Reads information about phone network operator.
  discovery
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Download New Code at Runtime

Credential Access

Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

behavioral3

discoveryevasion