fc05ed07d1ebc8eb31c9265d55bcc1b6075573492a5bda66283374d726ea1e3d

Analysis

max time kernel
20s
max time network
154s
platform
android_x64
resource
android-x64-20240221-en
resource tags

androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
submitted
28/03/2024, 15:05

Target

08bc04f30c059d3acb86298ac231855d_JaffaCakes118.apk
Size

3.6MB
MD5

08bc04f30c059d3acb86298ac231855d
SHA1

f62f904fa985000f4ad5e1c9c971004c161746d3
SHA256

fc05ed07d1ebc8eb31c9265d55bcc1b6075573492a5bda66283374d726ea1e3d
SHA512

2651a3cb09ce194e00cf207f7976d690cba97d8a7fa7ed6443e8478c9f2f408bd5798ec57bbc6bf322cca2ae45c94378bf27d7d64e583731c3786bb5588dde0a
SSDEEP

98304:RLkhTOHXXd7LsOwl2U3biXuh38xZcdauQuTWXWQ1JmzIYNmWxHIHik:tkhTOnd7Yd4EblteZeYXWCJENmapk

Score

6^/10

discovery

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	info.rhmmpjj.hhjjtk.sptvg

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	info.rhmmpjj.hhjjtk.sptvg

info.rhmmpjj.hhjjtk.sptvg
1⤵
- Acquires the wake lock
- Uses Crypto APIs (Might try to encrypt user data)
PID:5046

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact