327d3e0bfaa097018e8a49efb0ee4e4ecea2804dbf9e3bfa49d7ff39a448237b | Triage

Sharing

General

Target

aa41f19eda147bc36fea1202db4c751e_JaffaCakes118
Size

2.3MB
Sample

240819-j6qrkstapa
MD5

aa41f19eda147bc36fea1202db4c751e
SHA1

e1715553edd59b9191bf90282acb3008b58a1ac9
SHA256

327d3e0bfaa097018e8a49efb0ee4e4ecea2804dbf9e3bfa49d7ff39a448237b
SHA512

1819cae3f63940ce5b1509e5f531f8e41b8a7e2808ee69c86ffc7d76ef145a59436121c7647bc359ec4783dae158571af8731dfa4be13e13424b6e4ecf2064e9
SSDEEP

49152:EOtGiUThW8nzSE6dOqBm4N7LPZUyjYUYdVBZMx81WtXf/8jHrCIwpN4o:wFW8nsoh4N/ZUyMUyJMWOXerCIwDP

Score

8^/10

android discovery evasion persistence

Malware Config

Targets

- Target
  
  aa41f19eda147bc36fea1202db4c751e_JaffaCakes118
- Size
  
  2.3MB
- MD5
  
  aa41f19eda147bc36fea1202db4c751e
- SHA1
  
  e1715553edd59b9191bf90282acb3008b58a1ac9
- SHA256
  
  327d3e0bfaa097018e8a49efb0ee4e4ecea2804dbf9e3bfa49d7ff39a448237b
- SHA512
  
  1819cae3f63940ce5b1509e5f531f8e41b8a7e2808ee69c86ffc7d76ef145a59436121c7647bc359ec4783dae158571af8731dfa4be13e13424b6e4ecf2064e9
- SSDEEP
  
  49152:EOtGiUThW8nzSE6dOqBm4N7LPZUyjYUYdVBZMx81WtXf/8jHrCIwpN4o:wFW8nsoh4N/ZUyMUyJMWOXerCIwDP
Score

8^/10

discovery evasion persistence
- Checks if the Android device is rooted.
  evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries information about active data network
  discovery
- Queries the mobile country code (MCC)
  discovery
behavioral1 behavioral2

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Download New Code at Runtime

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2