Analysis

  • max time kernel
    7s
  • max time network
    155s
  • platform
    android_x64
  • resource
    android-x64-20240221-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
  • submitted
    28/04/2024, 09:28

General

  • Target

    04e10c3ee1c361baf4c4447e4937c4ee_JaffaCakes118.apk

  • Size

    8.8MB

  • MD5

    04e10c3ee1c361baf4c4447e4937c4ee

  • SHA1

    52cdc8caabfd993ca92e13a47558ad7f5385e38e

  • SHA256

    43f1a1b6be35e9067e53a627f001de750ba21ed0c9bb8d6ee3bf2b0134d95843

  • SHA512

    d0dbb0de17f8ef923abcddc54e8db18d20493d5ca7e24be91cb204344903da08167d9d4c4ae8b9087e96ad8b1155fed8e676b62076e1a649f034dbec1343e231

  • SSDEEP

    196608:FNR1/V4EozI9PHp4Vi4rBaoVyL3tcPqdVZI5l2TtTh2yt0Vmxjh3wC/:nzLC6R6MVyPq/ZI5lCPvGVm3p/

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 4 IoCs

    Runs executable file dropped to the device during analysis.

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.lion.zte.asp.gl
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5033

Network

        MITRE ATT&CK Enterprise v15

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.lion.zte.asp.gl/app_ded/9mc7ploXShtX2tjwkjq0rMfaMwwDcXPM.dex

          Filesize

          652KB

          MD5

          1e603a58244882521962e34b843472a1

          SHA1

          a3befb90faa53b2145b77843ac7cc2f30987c020

          SHA256

          8c42ce19599e65a6beeff12c62d543a4024ad0c57a086c0e62525286ba1116e7

          SHA512

          3a6101cbcc4647b29d5ac1a4c90ace0ddbc0c7815c5619831ecf9a53bc5be7ba913c7b597cca1620b811c1ce8ff891a6f0b0ec2249b5f5f50552189d3c45347c

        • /data/data/com.lion.zte.asp.gl/app_ded/JOISpl9bEvYjikuj2oGJny8b3KuHE4vn.dex

          Filesize

          3.5MB

          MD5

          ece73c1138f067857891e536a7aa84a2

          SHA1

          a9a04324271fa95542819f4e00e348eadb4a3894

          SHA256

          ad5f205ad35dcd53497bbd050fbfce8239d8d76c3c6639e1246ec4d02a5e8710

          SHA512

          84ed6848b9723616f46457325c54c99a12cce4eba395920e5b3db924e8207fa11c23aa5e20af90562d4a68a6d6a640bb3d61d0f16e0ffde28c891b6fc49dadab