irata | 39aea88a014e0aaf2b1ab24a4eec733f635b33d35db363daf0813750480407bd | Triage

Sharing

General

Target

bd3bc11db46364f4c652119750137982_JaffaCakes118
Size

4.2MB
Sample

240823-1dsh5szeqk
MD5

bd3bc11db46364f4c652119750137982
SHA1

460db596ca3e5a164d9b1a117d96773e06d00d9c
SHA256

39aea88a014e0aaf2b1ab24a4eec733f635b33d35db363daf0813750480407bd
SHA512

0cfbcb894e2a259490711f39e89b3ef9f96ed1201113526149f00c892402eee83ad76d7543a78ebf77bb294ae84d0f8ce4ba32880118e4b86aa289d8057068e7
SSDEEP

98304:zU2nTfAEwzbJ4NAkmNf/By/b9GQyd74FVqoxJ2BO:zU2nzA34NU9/EpJC4FV3J2BO

Score

10^/10

irata android collection credential_access discovery evasion execution impact persistence

Malware Config

Targets

- Target
  
  bd3bc11db46364f4c652119750137982_JaffaCakes118
- Size
  
  4.2MB
- MD5
  
  bd3bc11db46364f4c652119750137982
- SHA1
  
  460db596ca3e5a164d9b1a117d96773e06d00d9c
- SHA256
  
  39aea88a014e0aaf2b1ab24a4eec733f635b33d35db363daf0813750480407bd
- SHA512
  
  0cfbcb894e2a259490711f39e89b3ef9f96ed1201113526149f00c892402eee83ad76d7543a78ebf77bb294ae84d0f8ce4ba32880118e4b86aa289d8057068e7
- SSDEEP
  
  98304:zU2nTfAEwzbJ4NAkmNf/By/b9GQyd74FVqoxJ2BO:zU2nzA34NU9/EpJC4FV3J2BO
Score

7^/10

collection discovery evasion execution persistence credential_access impact
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Requests cell location
  Uses Android APIs to to get current cell location.
  collection discovery evasion
- Acquires the wake lock
- Queries information about active data network
  discovery
- Queries the mobile country code (MCC)
  discovery
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

Persistence

Event Triggered Execution

Broadcast Receivers

Scheduled Task/Job

Privilege Escalation

Defense Evasion

Execution Guardrails

Geofencing

Virtualization/Sandbox Evasion

System Checks

Credential Access

Clipboard Data

Discovery

Location Tracking

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Clipboard Data

Location Tracking

Command and Control

Exfiltration

Impact

Data Manipulation

Transmitted Data Manipulation

Tasks

static1

behavioral1

collectiondiscoveryevasionexecutionpersistence

behavioral2

collectioncredential_accessdiscoveryevasionexecutionimpactpersistence

behavioral3

discoveryexecutionpersistence