26a732700b062bc178388d79eae823cde167f2d6830e8edb2cd32c1dfc094ede | Triage

Sharing

Copy URL Twitter E-mail

General

Target

179664380d51dcb622d54be922ca471b_JaffaCakes118
Size

2.6MB
Sample

241006-lstx7axepm
MD5

179664380d51dcb622d54be922ca471b
SHA1

eccefb9a607e8df87931cacfad26c080026a7c5e
SHA256

26a732700b062bc178388d79eae823cde167f2d6830e8edb2cd32c1dfc094ede
SHA512

b5b07edfcdbc7a090161b0010e03418bcb555acede350dd1788baede1e35196de369c0d8b6119e3037e35a36705e0ea334cc3b0f185cd10cd7196e976f73fae8
SSDEEP

49152:HdwOSTEAR4NGTAkwWOguCk9qys23SuIY8zLf8hWxnW:HdwpTEAR4NGTAk7Ogukys2POzxI

Score

8^/10

android discovery evasion impact persistence

Malware Config

Targets

- Target
  
  179664380d51dcb622d54be922ca471b_JaffaCakes118
- Size
  
  2.6MB
- MD5
  
  179664380d51dcb622d54be922ca471b
- SHA1
  
  eccefb9a607e8df87931cacfad26c080026a7c5e
- SHA256
  
  26a732700b062bc178388d79eae823cde167f2d6830e8edb2cd32c1dfc094ede
- SHA512
  
  b5b07edfcdbc7a090161b0010e03418bcb555acede350dd1788baede1e35196de369c0d8b6119e3037e35a36705e0ea334cc3b0f185cd10cd7196e976f73fae8
- SSDEEP
  
  49152:HdwOSTEAR4NGTAkwWOguCk9qys23SuIY8zLf8hWxnW:HdwpTEAR4NGTAk7Ogukys2POzxI
Score

8^/10

discovery evasion impact persistence
- Checks if the Android device is rooted.
  evasion
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Checks the presence of a debugger
  evasion
behavioral1

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Tasks

static1

behavioral1

discoveryevasionimpactpersistence