irata | b387b52822498da152a9b033ead555d6ba808a0e5abbbece17fe9c948ee5fdac | Triage

Sharing

General

Target

ecf9cc4375e44bef1a8a0782fa9a8394_JaffaCakes118
Size

4.0MB
Sample

240920-gp8vqa1hph
MD5

ecf9cc4375e44bef1a8a0782fa9a8394
SHA1

3243c3e27ca02a1fcc6c47b6929b0f220a2662e2
SHA256

b387b52822498da152a9b033ead555d6ba808a0e5abbbece17fe9c948ee5fdac
SHA512

2ed870f49197cf205426c7ff22fb723dbc1938ec6b02067e1551cf692017ec9ad8b333d9fc0c0d797e34e4d2bddbdf140b791f1c3cb6b0582719e51a48b2277c
SSDEEP

98304:myUDelGW/XW+E4e0r/5rhbK6rf9sgizuQF:myUip/WD4eA5rY6rfKruC

Score

10^/10

irata android collection discovery evasion execution persistence

Malware Config

Targets

- Target
  
  ecf9cc4375e44bef1a8a0782fa9a8394_JaffaCakes118
- Size
  
  4.0MB
- MD5
  
  ecf9cc4375e44bef1a8a0782fa9a8394
- SHA1
  
  3243c3e27ca02a1fcc6c47b6929b0f220a2662e2
- SHA256
  
  b387b52822498da152a9b033ead555d6ba808a0e5abbbece17fe9c948ee5fdac
- SHA512
  
  2ed870f49197cf205426c7ff22fb723dbc1938ec6b02067e1551cf692017ec9ad8b333d9fc0c0d797e34e4d2bddbdf140b791f1c3cb6b0582719e51a48b2277c
- SSDEEP
  
  98304:myUDelGW/XW+E4e0r/5rhbK6rf9sgizuQF:myUip/WD4eA5rY6rfKruC
Score

7^/10

collection discovery evasion execution persistence
- Requests cell location
  Uses Android APIs to to get current cell location.
  collection discovery evasion
- Acquires the wake lock
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

Persistence

Event Triggered Execution

Broadcast Receivers

Scheduled Task/Job

Privilege Escalation

Defense Evasion

Execution Guardrails

Geofencing

Credential Access

Discovery

Location Tracking

Lateral Movement

Collection

Location Tracking

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

collectiondiscoveryevasionexecutionpersistence

behavioral2

collectiondiscoveryevasionexecutionpersistence

behavioral3

collectiondiscoveryevasionexecutionpersistence