2f4d9d7028f1809a71c5c78b2e156de5b5ce40435c167fb2cab0ebc03ad0c9eb

Analysis

max time kernel
35s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240506-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240506-enlocale:en-usos:android-11-x64system
submitted
13/05/2024, 14:14

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3fdf155779e298e168d060220a40384c_JaffaCakes118.apk
Size

11.7MB
MD5

3fdf155779e298e168d060220a40384c
SHA1

d2c1d13478cf7770e19a721149539de22aa41e88
SHA256

2f4d9d7028f1809a71c5c78b2e156de5b5ce40435c167fb2cab0ebc03ad0c9eb
SHA512

4692902c4cc09eaf3d05dee84f933ceea2fa626d021ee7c93f26aa6a56cfdcaa90e4e115e4d64c5705fe79a7693b4c158a89f15e17b99776e0d8d436949c0060
SSDEEP

196608:xL/SbOXeHB0/97cxrUjmhcG+3u2VLGPf7uaL4jEwPxcskFFabg:xubOcS/97yOmKBVLGPzuaLwZ4yg

Score

6^/10

discovery impact

Malware Config

Signatures

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.xgbuy.xg

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.xgbuy.xg

com.xgbuy.xg
1⤵
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4879

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact