762efcf20f6515c795e2ae244ae8fe36844f0140b2d08d7c734554c602f95971

Analysis

max time kernel
7s
max time network
149s
platform
android_x64
resource
android-x64-20240506-en
resource tags

androidarch:x64arch:x86image:android-x64-20240506-enlocale:en-usos:android-10-x64system
submitted
12-05-2024 18:16

Target

3b708157742f814934a702e1b94d084b_JaffaCakes118.apk
Size

480KB
MD5

3b708157742f814934a702e1b94d084b
SHA1

901e3ee1b355e904981bf83f6997242315a48842
SHA256

762efcf20f6515c795e2ae244ae8fe36844f0140b2d08d7c734554c602f95971
SHA512

adebcd3f4b61f19bc88f82acb5ab0c3c694ca192b5c41b5b5710672d9263d3c7c170199dce941e7a0a4ae8ce5f8254eb7810e8fcc15fbce8b8c1e07d386ae099
SSDEEP

12288:BvDOOVpqMex4HSEcSIk/JTVhMNseIj31VG3XajR8mtNNJUku:5BeGyEj7hMjA31VKqRlHvu

Score

7^/10

persistence

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

Broadcast Receivers
T1624.001

Processes:

com.gs.bs

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.gs.bs
Acquires the wake lock 1 IoCs

Processes:

com.gs.bs

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.gs.bs

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.gs.bs

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.gs.bs

com.gs.bs
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
PID:5042

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact