59195c5a81d49396d1b557952ce67ed02dc4ae1a9f529559257d58710738a209 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07dc20b88e73857c6789d47ec881eecb_JaffaCakes118
Size

561KB
Sample

241001-3gatlszdkh
MD5

07dc20b88e73857c6789d47ec881eecb
SHA1

b834826ea3d824bb7faa1d9196dcf7315099e9ae
SHA256

59195c5a81d49396d1b557952ce67ed02dc4ae1a9f529559257d58710738a209
SHA512

16d9b0bae07ec60430051f23fbcf98f6cb41e9f7de2b383fb31990ce77d8c933cba072c0a0a9d49bf351859e0331f6f539178fde4b2fbce741126d360fbbb15a
SSDEEP

12288:jYnMZC8yl5FP6QFEvPXOopFu8s12ooa+oaGNuNmOUutQ:jYnMZC8y/z6PemHs1hnamuNmOHQ

Score

8^/10

android discovery evasion impact privilege_escalation stealth trojan

Malware Config

Targets

- Target
  
  07dc20b88e73857c6789d47ec881eecb_JaffaCakes118
- Size
  
  561KB
- MD5
  
  07dc20b88e73857c6789d47ec881eecb
- SHA1
  
  b834826ea3d824bb7faa1d9196dcf7315099e9ae
- SHA256
  
  59195c5a81d49396d1b557952ce67ed02dc4ae1a9f529559257d58710738a209
- SHA512
  
  16d9b0bae07ec60430051f23fbcf98f6cb41e9f7de2b383fb31990ce77d8c933cba072c0a0a9d49bf351859e0331f6f539178fde4b2fbce741126d360fbbb15a
- SSDEEP
  
  12288:jYnMZC8yl5FP6QFEvPXOopFu8s12ooa+oaGNuNmOUutQ:jYnMZC8y/z6PemHs1hnamuNmOHQ
Score

8^/10

discovery evasion impact privilege_escalation stealth trojan
- Removes its main activity from the application launcher
  stealth trojan evasion
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
- Reads information about phone network operator.
  discovery
- Tries to add a device administrator.
  privilege_escalation impact
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Device Administrator Permissions

Defense Evasion

Hide Artifacts

Suppress Application Icon

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Account Access Removal

Tasks

static1

behavioral1

discoveryevasionimpactprivilege_escalationstealthtrojan

behavioral2

discoveryevasionstealthtrojan

behavioral3

discoveryevasionimpactprivilege_escalationstealthtrojan