8cad44a502d11a7607492db785fd6ccce1b84cf5236751e782c46b68d6ebf4fa | Triage

Sharing

General

Target

c12147f65ad95fd502fc4e23649a67b1_JaffaCakes118
Size

19.6MB
Sample

240825-tw3nhatanh
MD5

c12147f65ad95fd502fc4e23649a67b1
SHA1

c2e535f98e0e029e36a54b8c0536f5d50375f3d0
SHA256

8cad44a502d11a7607492db785fd6ccce1b84cf5236751e782c46b68d6ebf4fa
SHA512

4bc22cba2f69049a253809dcd9137e3799c280ed23c235283cfd61a4c50eebc86c88af350e82fe9e2a336ed88679148606e5f21212d05cf436e68904c9327b4a
SSDEEP

393216:rQX3TlOgxeFQRd69xnKI8WQbS52W5KVaXL3dpDfS8jmF:r9dMA6bSdrL3dpm8A

Score

8^/10

android discovery evasion impact persistence

Malware Config

Targets

- Target
  
  c12147f65ad95fd502fc4e23649a67b1_JaffaCakes118
- Size
  
  19.6MB
- MD5
  
  c12147f65ad95fd502fc4e23649a67b1
- SHA1
  
  c2e535f98e0e029e36a54b8c0536f5d50375f3d0
- SHA256
  
  8cad44a502d11a7607492db785fd6ccce1b84cf5236751e782c46b68d6ebf4fa
- SHA512
  
  4bc22cba2f69049a253809dcd9137e3799c280ed23c235283cfd61a4c50eebc86c88af350e82fe9e2a336ed88679148606e5f21212d05cf436e68904c9327b4a
- SSDEEP
  
  393216:rQX3TlOgxeFQRd69xnKI8WQbS52W5KVaXL3dpDfS8jmF:r9dMA6bSdrL3dpm8A
Score

8^/10

discovery evasion impact persistence
- Checks if the Android device is rooted.
  evasion
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Checks the presence of a debugger
  evasion
behavioral1 behavioral2

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Tasks

static1

behavioral1

discoveryevasionimpactpersistence

behavioral2