1167d3d54d4f7e01033d86004cb7ac98013f7d0f286887d2ad8c9d425c610a94

Sharing

Copy URL Twitter E-mail

General

Target
65db381e8811d3bb82b62968959d5d0f_JaffaCakes118
Size 14.9MB
Sample241021-hfdtnatblh
SHA256 1167d3d54d4f7e01033d86004cb7ac98013f7d0f286887d2ad8c9d425c610a94
MD5 65db381e8811d3bb82b62968959d5d0f
SHA1 10048b0bae5722fbade3ba0c4720bbe217f87627
SHA512 a328a4ecba9a153c87ad511ab3fbd0733d0615951d3497c791cdd7b7222b8a2b166ce200a84e59fdd7d87e9541895289f2a3cc8a988e359696eab58c3788fdfc
SSDEEP 393216:ONEBKF/xPGBVB8005UN1XGBQNhYT/yCar/m8Ds:OnZOBb80JNVhayr5I
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Malware Config

Targets

- Target
  65db381e8811d3bb82b62968959d5d0f_JaffaCakes118
- Size 14.9MB
- SHA256 1167d3d54d4f7e01033d86004cb7ac98013f7d0f286887d2ad8c9d425c610a94
- MD5 65db381e8811d3bb82b62968959d5d0f
- SHA1 10048b0bae5722fbade3ba0c4720bbe217f87627
- SHA512 a328a4ecba9a153c87ad511ab3fbd0733d0615951d3497c791cdd7b7222b8a2b166ce200a84e59fdd7d87e9541895289f2a3cc8a988e359696eab58c3788fdfc
- SSDEEP 393216:ONEBKF/xPGBVB8005UN1XGBQNhYT/yCar/m8Ds:OnZOBb80JNVhayr5I
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

banker discovery evasion impact persistence
- Checks if the Android device is rooted.
  evasion
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Acquires the wake lock
- Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Reads information about phone network operator.
  discovery
behavioral1
- Target
  CommonPlugin-2.6.apk
- Size 477KB
- SHA256 3936a5daa9e3dd8581b6e45fbf0c7dafe045e8ea91341ee08ae4630816030fa5
- MD5 5336140e3a1f16d4f4d690527d9d0c02
- SHA1 c1342092624f4c5ab81a7cf7c6438d0004052bc7
- SHA512 e7ec74f43bf5aa80b0ce1c63aee71c51740ec5f6949e44128475ee3b964151f06bc9a2bc4021b7a89a877f0a463b52fafa8045357490507aca1de165b3d3e543
- SSDEEP 6144:47JQ+CmoJfcCKBszPEq+eh8o+/TbgcwOnYWqF2w0woDIVIewSHffOBLfyAuGTs0h:47ZAZl+eA3gcS32wQI6ewQnkOsnN3
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral2 behavioral3 behavioral4
- Target
  ContainerPlugin-2.1.apk
- Size 45KB
- SHA256 66f902696da8426e315130c6af32f74650383fde7954fce207bb1527e59fffa0
- MD5 194eda3704c79de9ae637a84abb6f72f
- SHA1 bcab364afdfa895fa11de2fcf56df92d28e4b5f2
- SHA512 d0d9dea8c27e4c90f82430308c607b7c40a30d603b834e7200c2450a1b41258c9f5546f2d631dae238e3b10a283c459da12498e49f68ab4e19ec074fc1da2b2f
- SSDEEP 768:0CkCh3p84N/IN9bVV21utq05M2TKqvlCbL3DUsB4qj4EXMNvo9lVqylxwpG7aL:0m3lNwN9by65MPECwbqjXQo9dwPL
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5 behavioral6 behavioral7
- Target
  FrameworkPlugin-2.4.apk
- Size 19KB
- SHA256 7e614558c94cdcb2f1c1892a3055cfc44051fe395c0edea055ee9bb3dbe084ee
- MD5 025f7f077028787b0dd01225ed706ac0
- SHA1 f28d70ab98259ea4185df00da536b5d8fb877466
- SHA512 de45ff3d0b1e3039c5bd92292232a46ddca74a7af85c695b2ca6e51fc99d630838f669ef1713dca9842f15c817bc1a82ba7ed7aa50e62d94415b515d3192d0a4
- SSDEEP 384:vDziUhSRJWyEsUBefsun9zcY31PVy0l9OqHTi9im7s8jFVW47M6dwICD/:bR2xEsKvo9bFtZc4m77VP7xg7
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral10 behavioral8 behavioral9
- Target
  LoopImagePlugin-1.0.apk
- Size 40KB
- SHA256 736d5c62b2f2d4b2590f61ece2a708403215c8aadd71dc9a0e644a3c7894f161
- MD5 cafceaddd4321fb73436bd7fcd2e88c2
- SHA1 8c89b965dcdac5e0be392a1c12640b606a7ac6f4
- SHA512 5c9b6e184362e8478db958b1495cdba2e0d72da8a78216b082f5a8682ac8d30660fb4cb779326f879b39df19ef16b7f16738cabac14e1d7f28a60aaaa3a2c16b
- SSDEEP 768:sDI/m57rXFWLKxe7X+Fu9ZHhd8oBPkn6GQooWOqaAG32MBVkd8fKrq2M++FLYbo:sDGm57bgLKxe7wubHhd8oWn6lqaAe3Tt
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral11 behavioral12 behavioral13
- Target
  TAEPlugin-1.4.apk
- Size 773KB
- SHA256 5a3cf4abfc9bc82723ef63d8cb8e034f51ad206458e2693e6a706374eb75c12b
- MD5 9b7d696122e97317bb49707bc9e669f3
- SHA1 5af0698567f7c441021a363625258656404155e0
- SHA512 fa7c5b8f95118bc1b2bec3812b894e0ca1eb39abe5d8fe27c9884c2724d6ac90e48cb2a25963604babe5329609aef44ddc1aeca079672a48418665ac39b7bbfa
- SSDEEP 12288:QUA6fs2pLBA8T55J+piqTZdEVdtVCPzeikJ6SQgdSbFVMKdW:xRa8dP+Gos6gdSBVMSW
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral14 behavioral15
- Target
  WelcomePlugin-1.3.apk
- Size 30KB
- SHA256 fc7bdd092f410142525696414c0f998ac8fafbf715fc4d34888c648553653582
- MD5 1af4b10a3242afc56119e954021d7e08
- SHA1 9d18e3619ed1c16702ab49ae680ba3d73921c31a
- SHA512 74cda32b3f67c5681d71ab07d04b739da83a97d58e809b347fbe7b57a10bd91c25ec058cc1321cf3fc1cdcfdb1f1cbc234d4c0f3fafe4170a3b321ab8f3df3fa
- SSDEEP 768:d0rXFWLKxe7X+Fu9WjwebxQvRqNcyxA58IIDD:d0bgLKxe7wusMy+vRsZxA5UD
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral16 behavioral17 behavioral18

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Tasks

Sharing

General

Malware Config

Targets

Checks if the Android device is rooted.

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Queries information about running processes on the device

Acquires the wake lock

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

Queries information about active data network

Queries information about the current Wi-Fi connection

Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18