4dfc5eba3384050d39db0655292f79d0d17d1e70ec0fadf628be12f908c97a89

Analysis

max time kernel
4s
max time network
130s
platform
android_x86
resource
android-x86-arm-20240506-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240506-enlocale:en-usos:android-9-x86system
submitted
11/05/2024, 08:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

33a837feadff2d18ee390aaac6820925_JaffaCakes118.apk
Size

4.1MB
MD5

33a837feadff2d18ee390aaac6820925
SHA1

b283233d98ad46b42b34834cb68c0250a3832b27
SHA256

4dfc5eba3384050d39db0655292f79d0d17d1e70ec0fadf628be12f908c97a89
SHA512

965ba400dee7490a7c593ce4cb4d3208d74019c5abc2bf01218bd9f2294747b8f347f4c728e3f53681c1243dd1ab070b2cde68ef33eee75bf974aabdac7de7ac
SSDEEP

98304:H/iuhsVGlF0NKHjIqul0YPqX60IpC3ywD5YSTptUO8dRisW:fiuR+KDYSSUj5ywFYS/J8dQz

Score

7^/10

persistence

Malware Config

Signatures

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.uk.boss

com.uk.boss
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4252

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.uk.boss/databases/bugly_db_legu

Filesize
4KB

MD5
8d342a096942b790e1504a4b2c6781c8

SHA1
2378fc1fb3afda11cbd97546a9d9cad42f335247

SHA256
f3c9c969d580c846c91a7de36e7ecd0fc419c75cc03ee9c08445c1fddc767203

SHA512
af892b34abd810a43435747c7e61b90ed456725af8cf3e5f20f09904d6789aae120c925fb67a488676094a92facd4b874dd95cabdf8f8944ab5ac823e71e1681

Download Submit
/data/data/com.uk.boss/databases/bugly_db_legu-journal

Filesize
512B

MD5
76de5255762e23f35281d335fcd1c6e6

SHA1
a521687de7c0e96a6539cd752dfb7d5542d7e761

SHA256
63334aaec50c8fb9e78d88813e13212aadefa5293da80f5137d91597b1a7b68f

SHA512
b7617e7c7aec6b4e11183721039e78031cd80815ebd36565e049597582c41407f503424ce5c7c0b2e1a9161ff70c989036077537669eda1fa511b452f4e6abdb

Download Submit
/data/data/com.uk.boss/databases/bugly_db_legu-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/com.uk.boss/databases/bugly_db_legu-wal

Filesize
92KB

MD5
c880d3555de1a964a9c6a2978ceb803b

SHA1
2924c46b080f1c379ea87204ffb7221bf5122fe6

SHA256
8e5905b6a57a1569b256ad20c431629ad2969ad55841517bc22b158a0c94fa9c

SHA512
21de01b36ab4f1969788ab27a0baa0aa9d6dcb73ba28e1b26b468da169341984c26a46efb324ac0fe9f5ad3550ad4fd04978019b824c3e0ab70094c57a316187

Download Submit