9d63445a9d26264f2126cb6db5af24d0eccfa80f4019514ea2993231a965c788

Analysis

max time kernel
35s
max time network
132s
platform
android_x64
resource
android-x64-20240221-en
resource tags

androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
submitted
30-04-2024 05:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0922411ee0ec6f52ece13b2a8982dca6_JaffaCakes118.apk
Size

22.7MB
MD5

0922411ee0ec6f52ece13b2a8982dca6
SHA1

2536479c44cfe7c89d2ea9f90b48d4be2e26a436
SHA256

9d63445a9d26264f2126cb6db5af24d0eccfa80f4019514ea2993231a965c788
SHA512

63d9c604a6cefda7e17669704b5de92efc14514df51b347efecb0edd0f15e7dd706630bb33f8889b18d3fb614c69ea6447dd62ac7b750868e3247662b2d42812
SSDEEP

393216:Z615bMsE5so7ROKgWaaJ1U9kNNhN1MyG3uWUIuj/6hjkNAVVqrk+zehQx55mwupM:Z61YOBkJ1UMjr77SeASrk+R5mwupk

Score

6^/10

discovery impact

Malware Config

Signatures

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.futurefleet.pandabus.ui.yx

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.futurefleet.pandabus.ui.yx

com.futurefleet.pandabus.ui.yx
1⤵
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:5030

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact