406c45d14aa05469e0a2278470dd4f8df584ce044f8eb554b194664707a8157b

Analysis

max time kernel
7s
max time network
138s
platform
android_x86
resource
android-x86-arm-20240221-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
submitted
27/04/2024, 20:43

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0395bcf96d683ae3cca01429277df354_JaffaCakes118.apk
Size

31.8MB
MD5

0395bcf96d683ae3cca01429277df354
SHA1

12fa0ae459790cf5775d5c6e02ac1f6a1b01ba24
SHA256

406c45d14aa05469e0a2278470dd4f8df584ce044f8eb554b194664707a8157b
SHA512

38e4d27fe3d55985f34de27b18f87a83e218441268500d1d6397e2462edea0b539dc252649fd2352e5148ca95034b1b10991b60ef37ac69789c98d7e9fe0dbfe
SSDEEP

786432:LjyJN9M/EF/mgy0DSkC7ggJnqUbYN3dwEFMIIt6khCdeWPWBr:LGNM/EF+P0DSksJnqGYPhFMIcdChut

Score

7^/10

discovery evasion

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.darkmatter.pethunters

com.darkmatter.pethunters
1⤵
- Checks CPU information
PID:4271

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...