371b18df0c59b4cb74a046f239093eabb7532ecb94b5bdaf39b154a6e1f60806 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd9018a484b439f2ef8f743251806478_JaffaCakes118
Size

27.0MB
Sample

240823-3haj8stcjh
MD5

bd9018a484b439f2ef8f743251806478
SHA1

e21bf44d61f51732be3b9b0c212f656e932cff89
SHA256

371b18df0c59b4cb74a046f239093eabb7532ecb94b5bdaf39b154a6e1f60806
SHA512

aff8ef54b8ec38b590e6081da002072dfb4ca5a14a1b0c7000b8845378da3212d049b0629f618dcc1dd59f499d0304b3015d11390aa3ee9d4f5e25b414b8d6ac
SSDEEP

786432:2/EojcfbLNy5N+6ZcOutZSFhkpgAPJgflIzeu5QOwa8rv:2sojQ45NbZ9uskpg8JgfllyQcM

Score

7^/10

android discovery evasion persistence

Malware Config

Targets

- Target
  
  bd9018a484b439f2ef8f743251806478_JaffaCakes118
- Size
  
  27.0MB
- MD5
  
  bd9018a484b439f2ef8f743251806478
- SHA1
  
  e21bf44d61f51732be3b9b0c212f656e932cff89
- SHA256
  
  371b18df0c59b4cb74a046f239093eabb7532ecb94b5bdaf39b154a6e1f60806
- SHA512
  
  aff8ef54b8ec38b590e6081da002072dfb4ca5a14a1b0c7000b8845378da3212d049b0629f618dcc1dd59f499d0304b3015d11390aa3ee9d4f5e25b414b8d6ac
- SSDEEP
  
  786432:2/EojcfbLNy5N+6ZcOutZSFhkpgAPJgflIzeu5QOwa8rv:2sojQ45NbZ9uskpg8JgfllyQcM
Score

7^/10

discovery evasion persistence
- Checks Android system properties for emulator presence.
  evasion
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
behavioral1
- Target
  
  vivounionsdk.res
- Size
  
  29KB
- MD5
  
  7a92466708fa1ae45c5585a5b986f5aa
- SHA1
  
  e9e8e0dc60208b7a8b64a65550442a73f1166c30
- SHA256
  
  cc8416f87003538f2c8ea5280a7eaebfb40597b6ebdcc33c4fa64b0cf08d3b73
- SHA512
  
  026dec17ed60d89257c8cb7873a0ccc0de910aad6706f1bbb7936229d7074b9542b7b80a2040f466c64e6cf8896e8531ee01ed7acbfa6a7ed90637a5fe2d477d
- SSDEEP
  
  384:RAhiLwh2JKStCYi7PSSDq41bVjDIcRy3ftLYHiLaBsKFj+C:RAV2wYnSDqojDIcsfiHiG3l
Score

1^/10
behavioral2 behavioral3 behavioral4

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

Process Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

behavioral3

behavioral4