e7c6f5a6f852c98d2715857c153ef7a557a8bf58ecb07d4b1e64de54a9cf685d | Triage

Analysis

max time kernel
2s
max time network
127s
platform
android_x86
resource
android-x86-arm-20240221-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
submitted
28-04-2024 23:11

Sharing

Report Analysis Logs

General

Target

0647a98b693e57fa298f64a0d931c129_JaffaCakes118.apk
Size

19.4MB
MD5

0647a98b693e57fa298f64a0d931c129
SHA1

106e5b01fd341ff2938e8328f43553030b7d2a92
SHA256

e7c6f5a6f852c98d2715857c153ef7a557a8bf58ecb07d4b1e64de54a9cf685d
SHA512

bc9eab41ad0b71b3adee48e539e46f21004740e2616db9121559c5114e1b59ea5fa3a9ed9479d3c3e305b0f63726dcf1839d5cf81effbd67c85315c03bab9a22
SSDEEP

393216:cpSIY/9KLY0jjR/RVRjFmB/GrJllLt1ClSlDfnOYpwNI1QEcZlb+SdJ/:Gw9KldRVR5+/qjttDfOYUEC9+C/

Score

7^/10

discovery evasion

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/cpuinfo	com.disney.PuffleLaunchLite

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/meminfo	com.disney.PuffleLaunchLite

com.disney.PuffleLaunchLite
1⤵
- Checks CPU information
- Checks memory information
PID:4287

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads