9348f33e1d790f1a4b87aa281cd32a2dca48741e2494ea8bb944f2676ad9539d

Analysis

max time kernel
12s
max time network
159s
platform
android_x64
resource
android-x64-arm64-20240221-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
submitted
01-05-2024 02:57

Target

0af47d6752af58fb3e02c69f15e94661_JaffaCakes118.apk
Size

807KB
MD5

0af47d6752af58fb3e02c69f15e94661
SHA1

5118d8098baaf2451489dc2a6117e6d95ecf02f9
SHA256

9348f33e1d790f1a4b87aa281cd32a2dca48741e2494ea8bb944f2676ad9539d
SHA512

df409cf790994321db7f5635d4854256ddd954e5446344d09904b15de07f3fe7f4cbbef58d880652e508e3dcc622cec6e27b0b48990b23af39ddef477015995c
SSDEEP

12288:f6wuGorslMFHAiHDrJLLFKsULaD26C9XgqRCIlNE8Z6GvhZH:fDuprsl0AiHJLLssQaDnG5ZT

Score

7^/10

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
evasion persistence

T1541

Processes:

yps.eton.application

description ioc process

Framework service call android.app.IActivityManager.setServiceForeground yps.eton.application
Tries to add a device administrator. 2 TTPs 1 IoCs
privilege_escalation impact

T1626.001

T1640

Processes:

yps.eton.application

description ioc process

Intent action android.app.action.ADD_DEVICE_ADMIN yps.eton.application

description	ioc	process
Framework service call	android.app.IActivityManager.setServiceForeground	yps.eton.application

description	ioc	process
Intent action	android.app.action.ADD_DEVICE_ADMIN	yps.eton.application

yps.eton.application
1⤵
- Makes use of the framework's foreground persistence service
- Tries to add a device administrator.
PID:4696