58073207eed8241b4bf317c37850f435d9f425a0c40945dada984eca7745baa5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28e9cd2d7ccf12c6318b9f56f264fa7e_JaffaCakes118
Size

32KB
Sample

241009-cjnv5swhkd
MD5

28e9cd2d7ccf12c6318b9f56f264fa7e
SHA1

28aa04c7ea6819efff9cdc90ab4979e818d57abd
SHA256

58073207eed8241b4bf317c37850f435d9f425a0c40945dada984eca7745baa5
SHA512

beb65d5ade09e301692da310c9d0a0e9285fe77ae917360db19b2648889d3b8f505dc670bbf00d9414c8198ce62874ad6df17becec27af8a4c0307423b6d1117
SSDEEP

768:/TWTbxqaUivozxmOWS2D12Spl8rkDbpJvxPxS:/TWTbDQNmA2D158Mb/BY

Score

8^/10

android discovery evasion impact privilege_escalation stealth trojan

Malware Config

Targets

- Target
  
  28e9cd2d7ccf12c6318b9f56f264fa7e_JaffaCakes118
- Size
  
  32KB
- MD5
  
  28e9cd2d7ccf12c6318b9f56f264fa7e
- SHA1
  
  28aa04c7ea6819efff9cdc90ab4979e818d57abd
- SHA256
  
  58073207eed8241b4bf317c37850f435d9f425a0c40945dada984eca7745baa5
- SHA512
  
  beb65d5ade09e301692da310c9d0a0e9285fe77ae917360db19b2648889d3b8f505dc670bbf00d9414c8198ce62874ad6df17becec27af8a4c0307423b6d1117
- SSDEEP
  
  768:/TWTbxqaUivozxmOWS2D12Spl8rkDbpJvxPxS:/TWTbDQNmA2D158Mb/BY
Score

8^/10

discovery evasion impact privilege_escalation stealth trojan
- Removes its main activity from the application launcher
  stealth trojan evasion
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Reads information about phone network operator.
  discovery
- Tries to add a device administrator.
  privilege_escalation impact
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Device Administrator Permissions

Defense Evasion

Hide Artifacts

Suppress Application Icon

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Account Access Removal

Tasks

static1

behavioral1

discoveryevasionimpactprivilege_escalationstealthtrojan

behavioral2

discoveryevasionstealthtrojan

behavioral3

discoveryevasionimpactprivilege_escalationstealthtrojan