5c8dd6c1676d2c094b0ed7d36fb94e0993ccd7c74dc9f323e8fc98728ba27ef5

Analysis

max time kernel
9s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240506-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240506-enlocale:en-usos:android-11-x64system
submitted
12/05/2024, 14:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
3a9ab32ea262a5def1a119b8ed5abce0_JaffaCakes118.apk
Size 31.9MB
Sample240512-rw2ebsdf72
SHA256 5c8dd6c1676d2c094b0ed7d36fb94e0993ccd7c74dc9f323e8fc98728ba27ef5
MD5 3a9ab32ea262a5def1a119b8ed5abce0
SHA1 9498a36cfaebfae3221b66de19eb728794068668
SHA512 eaec68e7e920705027ad6d27a725d19309b2f083491dc80e9b75e718330164416d9104740da9b360f2ef6f8c301c9bf37fa54609100e2e495598f42bbb071275
SSDEEP 786432:5k2UClPdy6mPk51IbX1fecMcTom9C/ipn6DMjOFYWYh:22PQ61TAf2m8/KJjZZh
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.shogo.valk/files/stares/updates/sta.jar	4889	com.shogo.valk

Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.shogo.valk
1⤵
- Loads dropped Dex/Jar
PID:4889

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

libabcdefgh.so

Path /data/user/0/com.shogo.valk/app_plugin_lib/libabcdefgh.so
Size 61KB
SHA256 9a712cb778e9d43f8f4ea9fa2b9f4b8cc29daf74984d04f0c938dff21c118342
MD5 042246eb7c48a8cda97de99465e6a177
SHA1 f71816c4a80fbb7b63bfd6425d98db513aecb00a
SHA512 2d201619998113c5d2990c92c28c973d557872bc4bbde153b5fca39bfe0b799ef0e9bf8c29d1304847f8e6691d55649d04c6a82fe8f03e621c9e8da50c50faa8
SSDEEP 1536:UHHNUMGO/LhgFfaKShdyjxeaQ/AykEr/8MBvvChCTrRVTMGrV:UnNUc+a7p/ztBvvChCTrRVTlrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

sta.jar

Path /data/user/0/com.shogo.valk/files/stares/updates/sta.jar
Size 2.1MB
SHA256 8dc8a08cb4af889317d11fec26e2c1058f2af5056a4dbc25deaec8707073947f
MD5 e1dd5bacfa75b9cf6abf6eaa1635e3c7
SHA1 96a86954d989f634798c91523712c34eab06da3d
SHA512 e62c106f91d7a7202411a6938ed721fa695257f205e93772a87c59804a899a1bafd4887d48f2c9f33e5fe3ab6965227beb3fee007515ceb926e83d0e990fcc37
SSDEEP 49152:V1anRWSRRAeAOHy5mWr7cZVsjFrcZzVCuSlH7WKYnRgIpLLw:naRW0AqyJ0vsjFGzoNK7nRgIpLw
MD5 SHA1 SHA512 SSDEEP

Submit Download

sta.jar

Path /data/user/0/com.shogo.valk/files/stares/updates/sta.jar
Size 3.4MB
SHA256 245b99a86572d6736a00b18cdd507b865df688f14bf2fe232be26ef5a6171330
MD5 387e3984e552f9a4f47309dfc453f82a
SHA1 0e629acc985bb3565f33339ff04e9e1b73675cfe
SHA512 3d81d00d68b5ce7c5f91ad5086793b592d6f8658d67f74cdbdb9418c726dfb4f491a50a94030358927d8fd60c2a72534a11c13602424968e3bb99551b493dcd6
SSDEEP 24576:LEXvLo1sDVRVvI79D2ntLyHMcvxRxELoICNmyHNq0vXQOaM17R8Lw+jzyJHSaNMv:4fPw7lxEL4tHN2+RhQyJt2gw
MD5 SHA1 SHA512 SSDEEP

Download

.systemid

Path /storage/emulated/0/data/.systemid
Size 36B
SHA256 f61c1e9806575b5caaf0232a9d83ee8f139c5b1a96c2c1a279af20c6b2c6fc45
MD5 3e5a868bb793d85f11d318f81a32861d
SHA1 7547a1d73c3813a12ddba622986aa4cf7a55d748
SHA512 74905db963e42fe74934f1460168c51f0f7219e8ec6a4493d32189d4e213d1e3dd24d7f82035fe26868d9cc21a25e6dc298a376b4ba873d571e1598413e030eb
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads