27a645a3db0a8a9fbd4bfcd7993dabf995b6eaf727976dbc1c66a18f252834de

Analysis

max time kernel
2s
max time network
134s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
17-05-2024 10:20

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4f855ba3a78d3bb7418f8587d09caaa7_JaffaCakes118.apk
Size

30.3MB
MD5

4f855ba3a78d3bb7418f8587d09caaa7
SHA1

1c330edfe5f25ee9975b9d39176618dcc7f1d88a
SHA256

27a645a3db0a8a9fbd4bfcd7993dabf995b6eaf727976dbc1c66a18f252834de
SHA512

9affb34b414ba19e524bf872b71977741e40059c20d43c2211424d60fb2ba5a0044d36b28c3557e8532079a91bfa52b189d49a09a0f6030c8829b725fdceb466
SSDEEP

393216:Rf3pH6bgZNpBzuxUwJrt2rH0haR8moTmS3xLzt0Jd/hnaqiTCYFwGa4l523hd5y/:RRpZVzwwrUh6W1xchnhitFwGa4H8d5up

Score

7^/10

discovery

Malware Config

Signatures

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

Processes:

com.happyteam.dubbingshow

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.happyteam.dubbingshow

com.happyteam.dubbingshow
1⤵
- Queries information about running processes on the device
PID:4276

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1424

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads