5b519abd0a9b29da3007fe0d3e943eaae1d8bb885fd05429e1c113d2eca25c72

Sharing

Copy URL Twitter E-mail

General

Target
602353616b3d00a94feed4ea14220271_JaffaCakes118
Size 1.6MB
Sample241020-d2p2laycpk
SHA256 5b519abd0a9b29da3007fe0d3e943eaae1d8bb885fd05429e1c113d2eca25c72
MD5 602353616b3d00a94feed4ea14220271
SHA1 8446c9610ac5b269dfa32ff6f17b95dddde1ee91
SHA512 70c555cba0953feed3d7519bae70bca44b3799e072070d12a9008ad68a01c8c555c8f930ecd7c20513a6e40f09c764455b773780802afa6f6616257fb87917ce
SSDEEP 24576:I+Dz0rl4qP/OD/UuoKnlJfCytTHw2+t+fYDfEPxKY3kFzyLKIqTFNh/bQCcxgdso:5v06VLHlJqy1Qt2YTY/LK9TBzQCcxS
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Targets

- Target
  AdbWinApi.dll
- Size 94KB
- SHA256 14a51482aa003db79a400f4b15c158397fe6d57ee6606b3d633fa431a7bfdf4b
- MD5 47a6ee3f186b2c2f5057028906bac0c6
- SHA1 fde9c22a2cfcd5e566cec2e987d942b78a4eeae8
- SHA512 6a2675de0c445c75f7d5664ebe8f0e2f69c3312c50156161e483927e40235140d5e28e340112ac552d6462366143890a8ce32dbf65bd37e27cb1ea290fe14584
- SSDEEP 1536:npCxybY0FS6MqS6WvgD9xj03TabrFvY5J6sCGt:npo0k6ZWVTaif6sCG
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  AdbWinUsbApi.dll
- Size 59KB
- SHA256 041c6859bb4fc78d3a903dd901298cd1ecfb75b6be0646b74954cd722280a407
- MD5 5f23f2f936bdfac90bb0a4970ad365cf
- SHA1 12e14244b1a5d04a261759547c3d930547f52fa3
- SHA512 49a7769d5e6cb2fda9249039d90465f7a4e612805bba48b7036456a3bbd230e4d13da72e4ade5155ddc08fe460735ec8d6df3bb11b72ff28e1149221e2fc3048
- SSDEEP 768:HLNk0yiFYWkgALpW+QvSugX0wUepQNXTQXdF+Q+An70edrqqOkIW:+yY8wugEwOVEXdz70e4gI
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  Superuser.apk
- Size 823KB
- SHA256 8135f47bab91a26adfd563ed4dd22e25f454dfae02a076b6f3cd05604f2068a8
- MD5 65bd72996c68f289c5fa0b81f0874127
- SHA1 ee246d6e91017768e82b2d17e22e4044e4b7da2f
- SHA512 713468d5bce2d42d7d914077a4edc9e2b6d5fef0b657dce302750bb99b4dee3b0859c7722b4ad5b4dc125680f6690c9ee9ecd6baae1bdd21fe927a155765305a
- SSDEEP 12288:vwox9LddQ050PS59VJo1yOjLLfLHNm41awK4OhioC08pYAj4X5yXDn:Iox9XKyOL/tiXoDn
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery persistence collection credential_access impact
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Queries the mobile country code (MCC)
  discovery
behavioral5 behavioral6 behavioral7
- Target
  adb.exe
- Size 565KB
- SHA256 0cf0ddfb585f6d39814103384979730f5cb14b3dcd2c31b72eea542b530eb30d
- MD5 2c25a39086b640b2f83bebc82050b8fc
- SHA1 490037c7b26f567d42d7b15d26c31790d40b4a8c
- SHA512 c06d0892e74a81854097555efad25e0a392605e51812a251e22eb60b0075a566ac2e0d97d80f0d908e9be9d020eb4f2ecb546a34d2bdba944a99fb783b6d8e15
- SSDEEP 12288:bFfNhcDDQrLKz9j87T4WDbHwaqR3Jiv0yn75s+V5dltU7LTKsGsri:bA8JT4WvlrlN
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral8 behavioral9
- Target
  busybox
- Size 1.8MB
- SHA256 7c88dcbc170c966c8fa763c8996ad3e6f92316794f2e260454c3cec517482922
- MD5 5ea6873c7887cf31aac0bcafb10d7680
- SHA1 2c379b0f373f55fd44e1c8c4802a8d1b049fe2e8
- SHA512 25ee92284812284abcb6fb1bb0a71c3b942bdc2f863fe727b3aa4fa211bb2ddb3c95a929a44d3b5c101e91e8317e2c40867cd87483af787aa0117773f6589c15
- SSDEEP 24576:8kJJEb/l5CH6s0S5+qls8FVDgSOA1RSLakp2mNsh0xAJLhtwN5oOOKSYt7e7uUBG:1WWk2NqaK2y75divByRhkb
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral10
- Target
  motofail
- Size 489KB
- SHA256 4298f55d7e24b22061515f02e8856e8a8e9b724ed68ad97aba3172220d64932b
- MD5 5285afb7f3d5cbefe2e3249d69d746ba
- SHA1 272fa14b0865c97ad51935766dec086ced0c6a19
- SHA512 cab2f3170e99505b75025810051ab1fdb8f2a4b749aa51683c6e9e9428fd8f699f6222d480842cf5e1e32bc49770ad4852d3b992ec9d4fb5f29110ee91e07bd0
- SSDEEP 1536:zYQHLbI5jjnHH/EbNtTmesZDRW9e/RHsMaXv14oeX:SfEcR9/ZsQ
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral11
- Target
  run.bat
- Size 1KB
- SHA256 36bc0f44a2cbf8e7b09e7277f0ed3383c055e61e8eba0217820bb83cdb10a950
- MD5 1a6d265c8ce3e9cb5e6832688f774717
- SHA1 092da7225c0359b4be35d30e9f7a0c6dfd568c37
- SHA512 73a456899f63ddafa4ff34c2909a68711c9246de4084bd85597e36de5b17dffdf64de2f8d88ea6933208ed5b9eb782f41f39ddd221fb1c1c3f5f788fc49624c6
- MD5 SHA1 SHA512
Score

1^/10
behavioral12 behavioral13
- Target
  su
- Size 21KB
- SHA256 69693318243f119a71e76d5bf6966bd0438152806366885b7c8d956982b0ff3a
- MD5 d1a9de9724c662a50a9a128e48b1fb37
- SHA1 61410f2e93f5a397f8fc3dd51ea04d6e82734615
- SHA512 68a714110b20f7d7aad585d0a0b3d353d16a7624ec47e634991c870d98e5a7998b4f45149cbfbada863d1281ffecadd8a5770066de85523750ed7c075de05828
- SSDEEP 192:t3RAOsWMMeBnMhyiEvxNh4rpAAwKkfm74OKTIeKKKKKKKKKKKKKKKKKKKKKKKKK/:MvWxexD61XYm7hYt
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral14

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Tasks

Sharing

General

Malware Config

Targets

Obtains sensitive information copied to the device clipboard

Queries the mobile country code (MCC)

MITRE ATT&CK Enterprise v15

MITRE ATT&CK Mobile v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14