Overview

overview

10

Static

static

10

DroidJack....at.apk

android-9-x86

DroidJack....at.apk

android-10-x64

DroidJack....at.apk

android-11-x64

aapt

macos-10.15-amd64

1

aapt.exe

windows7-x64

1

aapt.exe

windows10-2004-x64

3

DroidJack....ol.jar

windows7-x64

1

DroidJack....ol.jar

windows10-2004-x64

1

DroidJack....fm.jar

windows7-x64

1

DroidJack....fm.jar

windows10-2004-x64

1

DroidJack....pk.jar

windows7-x64

1

DroidJack....pk.jar

windows10-2004-x64

1

DroidJack.....6.jar

windows7-x64

1

DroidJack.....6.jar

windows10-2004-x64

1

DroidJack.....4.jar

windows7-x64

1

DroidJack.....4.jar

windows10-2004-x64

1

DroidJack.....2.jar

windows7-x64

1

DroidJack.....2.jar

windows10-2004-x64

1

DroidJack.....1.jar

windows7-x64

1

DroidJack.....1.jar

windows10-2004-x64

1

DroidJack.....5.jar

windows7-x64

1

DroidJack.....5.jar

windows10-2004-x64

1

DroidJack.....5.jar

windows7-x64

1

DroidJack.....5.jar

windows10-2004-x64

1

DroidJack.....5.jar

windows7-x64

1

DroidJack.....5.jar

windows10-2004-x64

1

DroidJack.....4.jar

windows7-x64

1

DroidJack.....4.jar

windows10-2004-x64

1

DroidJack.....5.jar

windows7-x64

1

DroidJack.....5.jar

windows10-2004-x64

1

DroidJack.....4.jar

windows7-x64

1

DroidJack.....4.jar

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    ef76f412df4275fbeac3e98b7c1661c9_JaffaCakes118
  • Size 18.1MB
  • Sample240921-kz93bavanr
  • SHA256 b6d88c1b604301462d0eeaa97ca9a114b61e1d66eecb60636906ccf90644446c
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
sandroratandroiddiscoverymacos

Malware Config

Extracted

Family

  • sandrorat

C2

  • 192.168.1.5:1337

Targets

    • Target
      DroidJack.4.4.Cracked.2.02.2016/DroidJack/Apktool/SandroRat.apk
    • Size 252KB
    • SHA256 03ac348fc2978168bf86a1ba63a32f411e5642fbd11c95f59ff4d4c7e7b049c6
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral1behavioral2behavioral3
    • Target
      aapt
    • Size 1.1MB
    • SHA256 4b0b43987b479c242f40c91bca06a0e7b08dc0af3ce51490b3149cf6b0be9612
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral4
    • Target
      aapt.exe
    • Size 833KB
    • SHA256 e37c72c9aab974d4e02e9e4d86ccfaefa5e093f06969b278db17217b984bc227
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    discovery
    behavioral5behavioral6
    • Target
      DroidJack.4.4.Cracked.2.02.2016/DroidJack/Apktool/apktool.jar
    • Size 6.0MB
    • SHA256 c15cf1b87486d83dbc9e5ce64a03178a64eeeecf62cf08637193ba759f61419b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral7behavioral8
    • Target
      DroidJack.4.4.Cracked.2.02.2016/DroidJack/Apktool/efm.jar
    • Size 4KB
    • SHA256 91d79633b19d62b0ea71341b1692f49b2b59f9535e30a181d66fc4e83b0a2660
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral10behavioral9
    • Target
      DroidJack.4.4.Cracked.2.02.2016/DroidJack/Apktool/signapk.jar
    • Size 7KB
    • SHA256 b17534e89a5b58d5e343ba54a49da579cf9213988f4beeae24fe4582a0c226bb
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral11behavioral12
    • Target
      DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/commons-codec-1.6.jar
    • Size 227KB
    • SHA256 54b34e941b8e1414bd3e40d736efd3481772dc26db3296f6aa45cec9f6203d86
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral13behavioral14
    • Target
      DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/commons-io-2.4.jar
    • Size 180KB
    • SHA256 cc6a41dc3eaacc9e440a6bd0d2890b20d36b4ee408fe2d67122f328bb6e01581
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral15behavioral16
    • Target
      DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/commons-lang3-3.3.2.jar
    • Size 403KB
    • SHA256 46d24ea8d0771655aec5fdf203ca4bfab4cc1a4587b8a15901d385f80263dd36
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral17behavioral18
    • Target
      DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/commons-logging-1.1.1.jar
    • Size 59KB
    • SHA256 ce6f913cad1f0db3aad70186d65c5bc7ffcc9a99e3fe8e0b137312819f7c362f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral19behavioral20
    • Target
      DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/fluent-hc-4.2.5.jar
    • Size 21KB
    • SHA256 e13070f38957fc1c063895105ab64c810a3fd8b4b6ab5d45ce2d508c8d5fa192
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral21behavioral22
    • Target
      DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/httpclient-4.2.5.jar
    • Size 423KB
    • SHA256 56b4aae1bd9c66e1f890279dde75e81d226c97e302de97dafc081adeab956bbc
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral23behavioral24
    • Target
      DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/httpclient-cache-4.2.5.jar
    • Size 112KB
    • SHA256 a67c50b74286766bdbb397088c4a78f1008d2ab17df7562db76439778c90430a
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral25behavioral26
    • Target
      DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/httpcore-4.2.4.jar
    • Size 221KB
    • SHA256 bda2b9e0464f7a0e122d5e9bff7b384f3bc3a91af18ad51e029deaaa599e5db3
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral27behavioral28
    • Target
      DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/httpmime-4.2.5.jar
    • Size 25KB
    • SHA256 2ef409c599c532ca1e692013582695231bdb9f3956d4ec9ba3ac71300728b382
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral29behavioral30
    • Target
      DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/jaad-0.8.4.jar
    • Size 653KB
    • SHA256 be6ba7919a20f602703536e343860c2ae74ad18da195fd845743b877dbb379f7
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks