57d52cba8e923d712ebfdef5794e6daa64ab93f7605f6dccb436c3a399271c29

Analysis

max time kernel
12s
max time network
189s
platform
android_x64
resource
android-x64-20240514-en
resource tags

androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
submitted
15/05/2024, 05:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
44cbba060e9182d7b115831dbcc5ac07_JaffaCakes118.apk
Size 6.6MB
Sample240515-gn3mbacd48
SHA256 57d52cba8e923d712ebfdef5794e6daa64ab93f7605f6dccb436c3a399271c29
MD5 44cbba060e9182d7b115831dbcc5ac07
SHA1 f00a3f432285944dffafefc25e11450474151068
SHA512 a7d522d11766d107dba39887863f867d863ab22fb6936861500cc83e5808dfe3955ce93d5a04939db4c4dcf76fa8df64f762c774b068a4c3d7aacccec5cf81fe
SSDEEP 98304:vcIsHV2Rp2bMIyooyKaCfxZFLX/AJyLxTL7MiZie:vQVUIvoXa6xZFLXqKM+3
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

evasion stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs

stealth trojan evasion

Suppress Application Icon

T1628.001

pid	Process
5138	com.idbibank.atmtracker

com.idbibank.atmtracker
1⤵
- Removes its main activity from the application launcher
PID:5138

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

VaoYuyFxY

Path /data/data/com.idbibank.atmtracker/files/VaoYuyFxY
Size 354KB
SHA256 106f098d383fd02992209b2e0dbc783f9be45998907dbddc77f5c5e2f1c41de1
MD5 a529a8bb753cc50393beb4ddd502fac3
SHA1 685565f1ca491b51e10f9b7759ef8e393a5815db
SHA512 6af19cee54754abae881f27120f5d00ba5189558c58955f47371a0846830a8c3302b62e814b8654289a1c49a53c8c473e4151cc16c8e49aed48aaa2dc6988ebb
SSDEEP 6144:zKut4jmdTcEgQT9FUWT+OyN3WYKRnTPObNonceHQBx3VQNeGAyHo5tONmxOHvsnx:twlQNanxivs431pSa5h9BRB+CG/
MD5 SHA1 SHA512 SSDEEP

Submit Download