890c96e77f2412c6c836139e0417533793cbf6cf9f55eed9086f9e109e58d647

Analysis

max time kernel
123s
max time network
127s
platform
android_x86
resource
android-x86-arm-20240221-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
submitted
05-04-2024 07:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ccf39a7e328fd51473efbf663b746a99_JaffaCakes118.apk
Size

6.7MB
MD5

ccf39a7e328fd51473efbf663b746a99
SHA1

db2c8e7654d41cb613d4c64e1f255d25e251a05d
SHA256

890c96e77f2412c6c836139e0417533793cbf6cf9f55eed9086f9e109e58d647
SHA512

e6ef7c2deaa4b7502898fba179d20433512dfb0f9332069a2387136d6580fca63a2eb01807d1c7b16724ece4f2f9788a473c96715c3b4d90663dc089e100cecd
SSDEEP

98304:iz//QPC8AOpIfsX/EA4A3Fxn9YbySQmhSyIbljwzlDO+bSPy5mCGccoQnmOe:1Pp9J/EA4Af6jQm8FADBbScconOe

Score

7^/10

discovery evasion

Malware Config

Signatures

Checks Android system properties for emulator presence. 1 TTPs 1 IoCs

evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.product.model	com.mini.world.blockart.exa

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.mini.world.blockart.exa

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.mini.world.blockart.exa

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.mini.world.blockart.exa

com.mini.world.blockart.exa
1⤵
- Checks Android system properties for emulator presence.
- Checks CPU information
- Checks memory information
- Uses Crypto APIs (Might try to encrypt user data)
PID:4323

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.mini.world.blockart.exa/cache/1582435991586.jar

Filesize
9KB

MD5
e8e0527a01aefdb89afd2c508f131da1

SHA1
f1103e6b260c657ceb3d95f1b023af3fda8b133a

SHA256
f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce

SHA512
fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads