31887151bfa0364eeee63c08368ae4a5d6d57bfadda6cb8ef66b9272b678bdae

Analysis

max time kernel
97s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240221-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
submitted
20/04/2024, 17:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

fd45eb3ef38e6ac904d1bf70e143b2de_JaffaCakes118.apk
Size

4.4MB
MD5

fd45eb3ef38e6ac904d1bf70e143b2de
SHA1

aa1041e379581405d5f8cb5d29b89d479d7f6786
SHA256

31887151bfa0364eeee63c08368ae4a5d6d57bfadda6cb8ef66b9272b678bdae
SHA512

51527f2367a2bc5da43f609de48d2ba7ee291cb6221fb87d27622029ee2296a3a57935881b1b8289a7760479c667ce99cf1a1f08c39f472948d222110165e876
SSDEEP

98304:flH+PXIKbgD8y0Um2yjnAUrDkjYWgWqz0qxmTddhDfOhqsOD3M:NH+/AD8ULKADHK0qxmnYhqsV

Score

7^/10

discovery evasion

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.cutt.zhiyue.android.app220006

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.cutt.zhiyue.android.app220006

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.cutt.zhiyue.android.app220006

com.cutt.zhiyue.android.app220006
1⤵
- Checks CPU information
- Queries information about the current Wi-Fi connection
- Checks if the internet connection is available
PID:4431

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.cutt.zhiyue.android.app220006/files/mobclick_agent_cached_com.cutt.zhiyue.android.app220006

Filesize
122B

MD5
da295492cb1ec116161e142cd50cd639

SHA1
264377263e58c8524ebd0a13567b5321fbea5ece

SHA256
2e0bc67af9ce754f1ea3ff5c69234ea8ed8e66bb9771239a1629d150cb578dbb

SHA512
ddc12a7552fa68a2baf6c894c1c75620814e50834744024f8fa8577062f643a63491e606c48e51a78d04bb04410cd1778402adb6f43c34217a4ae2324043cea1

Download Submit
/data/user/0/com.cutt.zhiyue.android.app220006/files/mobclick_agent_cached_com.cutt.zhiyue.android.app220006

Filesize
628B

MD5
7b7fa44ec8824684a940f063f3d02f7c

SHA1
e8f6f18d51d0e9a37b648954a2a101b284140366

SHA256
137ee833ea9faafe9a59b0347d4b6376bcd582cc26f194b5690a2549f45f0ecb

SHA512
e816b6d6953a1e193323af697217a85cdb22899248f2e1d234c32154c5bc69676fc0062f962cbe8505aaf0fb664cd5e109d08941c3d978a2636c4956a07f7545

Download Submit
/storage/emulated/0/cutt/com.cutt.zhiyue.android.app220006/log/1713634823413

Filesize
7B

MD5
38ca9bbebb79ef4ca025383a45544597

SHA1
628758529ce7e126a52036b359253ab7fbf6acf4

SHA256
6539a6ab7b5c52809bc720ac1c5a21c349e28a230d33c339232a2cacf053a271

SHA512
e68fc40b80453096d53cda7888d866a1438f34796be5ca6b0f08c7ad4aa2974ab8b40be821473916d41ca07ad3c67877725b3c392e04181506a90f4e085adf65

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads