09c1ad140e4565fe8b97b33a28cdfe9f2ea7b56f38ce804e95308fb8c121a747 | Triage

Sharing

General

Target

2a5b91dc392f84ff59a39acb3a4f0248_JaffaCakes118
Size

42KB
Sample

241009-efxd8atapp
MD5

2a5b91dc392f84ff59a39acb3a4f0248
SHA1

7b921df77d7a5927682cfb65cfc193d1569e0788
SHA256

09c1ad140e4565fe8b97b33a28cdfe9f2ea7b56f38ce804e95308fb8c121a747
SHA512

07ac23a73d28c303112e85a911423587cf3f1275c881deecf1e761c19316e440e3ed10ee0cd70fcac64b3e51385e7d32c68fbef278a51ee3a06679685ebe94ba
SSDEEP

768:iuBjRESIGsWGCvgyGJFI8P+CMz3bFkgzYfz4BEm71:is8GsWFv4XI8mCqLKfMBEm71

Score

8^/10

android discovery evasion impact privilege_escalation stealth trojan

Malware Config

Targets

- Target
  
  2a5b91dc392f84ff59a39acb3a4f0248_JaffaCakes118
- Size
  
  42KB
- MD5
  
  2a5b91dc392f84ff59a39acb3a4f0248
- SHA1
  
  7b921df77d7a5927682cfb65cfc193d1569e0788
- SHA256
  
  09c1ad140e4565fe8b97b33a28cdfe9f2ea7b56f38ce804e95308fb8c121a747
- SHA512
  
  07ac23a73d28c303112e85a911423587cf3f1275c881deecf1e761c19316e440e3ed10ee0cd70fcac64b3e51385e7d32c68fbef278a51ee3a06679685ebe94ba
- SSDEEP
  
  768:iuBjRESIGsWGCvgyGJFI8P+CMz3bFkgzYfz4BEm71:is8GsWFv4XI8mCqLKfMBEm71
Score

8^/10

discovery evasion impact privilege_escalation stealth trojan
- Removes its main activity from the application launcher
  stealth trojan evasion
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Reads information about phone network operator.
  discovery
- Tries to add a device administrator.
  privilege_escalation impact
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Device Administrator Permissions

Defense Evasion

Hide Artifacts

Suppress Application Icon

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Account Access Removal

Tasks

static1

behavioral1

discoveryevasionimpactprivilege_escalationstealthtrojan

behavioral2

discoveryevasionstealthtrojan

behavioral3

discoveryevasionimpactprivilege_escalationstealthtrojan