3ee0ef1c4ad2ddfd53450078e33308b5855992fdcae46b418a4cd87618ace11e

Analysis

max time kernel
33s
max time network
134s
platform
android_x86
resource
android-x86-arm-20240221-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
submitted
01/05/2024, 12:12

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0bc501d5122690f25e83117049f73607_JaffaCakes118.apk
Size

18.5MB
MD5

0bc501d5122690f25e83117049f73607
SHA1

c2c6551513cdf6e001e2fd12293accca3e0d99f6
SHA256

3ee0ef1c4ad2ddfd53450078e33308b5855992fdcae46b418a4cd87618ace11e
SHA512

747f5c132e2c191df13434fd78e71803e3b8aef4a922ac9c9c6d9b6492de5b182fca71588de76be4b3fc13a084d09ba28f1019c8d23f36ae66c4e012a305e012
SSDEEP

393216:2gaZu22ItYefayv/Cm2qNKN8AfKiUMSpq0k4Gczsh+cnaUuHqYVAKsk24W3wHAT:2zZuF4YmCmZ48AhN70+cz4+5q0HAT

Score

6^/10

discovery impact

Malware Config

Signatures

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.phone580.cn.reader

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.phone580.cn.reader

com.phone580.cn.reader
1⤵
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4247
- chmod 755 /data/user/0/com.phone580.cn.reader/.jiagu/libjiagu.so
  2⤵
  PID:4302

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact