444759985eb10a2defcf276caf0516c1c36588ecf6b5cb83476062b2f0a84ff3

Analysis

max time kernel
4s
max time network
129s
platform
android_x86
resource
android-x86-arm-20240506-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240506-enlocale:en-usos:android-9-x86system
submitted
11/05/2024, 16:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

358f3acac285d20ace0608aed000fbcb_JaffaCakes118.apk
Size

28.5MB
MD5

358f3acac285d20ace0608aed000fbcb
SHA1

93274cfdc4c4bfdd859361d318db7c43a45f4b5d
SHA256

444759985eb10a2defcf276caf0516c1c36588ecf6b5cb83476062b2f0a84ff3
SHA512

5393a25acc6a2b40c15df6ce88b912b9e9de20d29e3f6fa77511c71044f095c5ec0fa248e6f1336e704dbb0e457d06fa5104661eda80664622391fe26597912d
SSDEEP

786432:SGfPqt9VLWasltY/y4YEl7J71GYWnFhvExcqjBMS:SGmylmJY47SYGMOqjh

Score

7^/10

discovery evasion persistence

Malware Config

Signatures

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.mageeks.android.constructionsim17.st

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.mageeks.android.constructionsim17.st

com.mageeks.android.constructionsim17.st
1⤵
- Checks memory information
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4261
- /system/bin/sh -c getprop ro.board.platform
  2⤵
  PID:4322
- getprop ro.board.platform
  2⤵
  PID:4322

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.mageeks.android.constructionsim17.st/app_bugly/tomb_1715445840173.txt

Filesize
136B

MD5
535c926df50eb6d4024b5a2faf150313

SHA1
bafd170f9cf63706fa2b16b331b3191b745290e9

SHA256
4af1268a73b5a35cc7a3b7f6a9b9ee96d846ba0f5bc8754f236a93b37551df62

SHA512
22c15d1c45e81c8a389564290b4d5b1cf4deaf93d3264200bdc76caaeff752b8f39773854981e07106bd0037f1057681fcbb740c87b947d910f9574f287a1f80

Download Submit
/data/data/com.mageeks.android.constructionsim17.st/databases/bugly_db_legu

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.mageeks.android.constructionsim17.st/databases/bugly_db_legu-journal

Filesize
512B

MD5
83652d5815825323408ee84106b2cb06

SHA1
40a8b866bf9113c28f6ebbf67d85eb7b97e56a29

SHA256
2333b8ac812bc4ce77723bbb8283704af49694c75ae83726a102e4cad90d84b9

SHA512
76174ce6af6dc14a44ded65db57b4f2ceb634ac574794442fd18e8f6f9a5c7848009c2b968657e8519138c911347ec8d78d47e03d7b05404aa54eec082162317

Download Submit
/data/data/com.mageeks.android.constructionsim17.st/databases/bugly_db_legu-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/com.mageeks.android.constructionsim17.st/databases/bugly_db_legu-wal

Filesize
92KB

MD5
3dc6f8b85f1f7ac7d857e7c6f9ef7a14

SHA1
6d2792bc6abc55045c07342ea17ad3bcfe8f8b2b

SHA256
32b059977ef62a707a4af406e86fbcd602d6a5e0121d84ec37475d8578d1b10a

SHA512
ad4d56b424ed0dd34fb7ebb818c46c08b3732ed58d5d478214ea2a98a691bebacea45868d1222fef2acae36ded1273dceffa3c417d73a0a4681a20649faa2517

Download Submit