b76f94071a7b1a8d8e2de866db1e1376634bcd53af38552ea7f12fff10799c8e | Triage

Analysis

max time kernel
168s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
15-05-2024 22:12

Sharing

Report Analysis Logs

General

Target

4844d181b0fd3d5f2ae66314cd080d25_JaffaCakes118.apk
Size

324KB
MD5

4844d181b0fd3d5f2ae66314cd080d25
SHA1

2cdaab8b9856a2cde13975e15392420e19e19c21
SHA256

b76f94071a7b1a8d8e2de866db1e1376634bcd53af38552ea7f12fff10799c8e
SHA512

3dffb0c7c5d5bbc9b3244b41d2617638f48c3c4532e2bac9abb58221f48941c8001f4211b1c73937c0643f584631feb2924fea86ff11f375833c0a749ba4fe7e
SSDEEP

6144:GLn6usEdPX8I1sy9YcAkENnUNDKAO3+7od2ki4U6L0Yfv2ybprf:YpNX9sy9qnVhu72r1UqHv2yVrf

Score

8^/10

banker discovery

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

com.kuaidi.byzm
1⤵
PID:4277

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Software Discovery

Security Software Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.kuaidi.byzm/databases/kuaidi

Filesize
20KB

MD5
907749d5dd51e69fa9fdea7574a8a40b

SHA1
628fab805ba4f6725e738e724acb14ab3a82b850

SHA256
7eef59b12d269efea5de625b330ccb39b2a09079699f3e8b836447fdaeecf116

SHA512
ff3ad4aabe020d394f6a7111662d985f45b1deb8e3c412a007d25ffc5d0516696f9b24a6ce707d65ba03022d0d6612b9b34c0e6b760a6be255264edf154cb804

Download Submit
/data/data/com.kuaidi.byzm/databases/kuaidi-journal

Filesize
512B

MD5
70568e1ccb0bd69f124e261e1b211218

SHA1
216d8a71b99307f0a6944e69980b72409aa986ec

SHA256
4cba9c95fbc8d36417eba66429df95ca5dbe56ca2094e27e331b3f9643ff3688

SHA512
fed6a993e760aaa740e087a341ea1cbd35476957e524a10ac26b0c478cf2d4d1ab540206c7f9be7deb314cd35d6c09fd48a73954835032110362a661759259c2

Download Submit
/data/data/com.kuaidi.byzm/databases/kuaidi-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.kuaidi.byzm/databases/kuaidi-wal

Filesize
32KB

MD5
1be80275264a0b6f3410253255bf7f51

SHA1
1b3d12ecc107607540d2840a69033d6ebed384e5

SHA256
874bf06bbb927c36cda430bbe72800657024f540f7a39172282d4db42e714396

SHA512
7c66ed308126ee68a3dd966b7bab6731f31c4daebb7c5cc8554c17675f29431423f33ea8f1f67196d389ad789ad5ac80dbf289b006794d674d1b8ec969d7f0e3

Download Submit