02871e0fb9ba4f8c10279e68b0a7e8ec8b7cc4edc01224f1b08a4c96a0d66e2a

Analysis

max time kernel
132s
max time network
168s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
19/05/2024, 03:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
5855ab2c47bd0c5338b4b4da0c3959e7_JaffaCakes118.apk
Size 1.9MB
Sample240519-d152esgd43
SHA256 02871e0fb9ba4f8c10279e68b0a7e8ec8b7cc4edc01224f1b08a4c96a0d66e2a
MD5 5855ab2c47bd0c5338b4b4da0c3959e7
SHA1 4642151976f9cad5749710d6f7198047d6addd26
SHA512 64ca44a4ff285480b9f9bd62a02601ded6d4c2bc7a708112f496e5b90281eda6b94e8be914854c0580757d800b44977dd1556b8ca0da928e7011db04132850e5
SSDEEP 49152:c/kOfOGrnIOkSuHNeZrnboDumCjeIFATZq5:tOBrnI2ute1sShKmAI
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.owc.mgrpca/files/zt/WBNJgYFbt.jar	4230	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.owc.mgrpca/files/zt/WBNJgYFbt.jar --output-vdex-fd=44 --oat-fd=45 --oat-location=/data/user/0/com.owc.mgrpca/files/zt/oat/x86/WBNJgYFbt.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.owc.mgrpca/files/zt/WBNJgYFbt.jar	4202	com.owc.mgrpca

com.owc.mgrpca
1⤵
- Loads dropped Dex/Jar
PID:4202
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.owc.mgrpca/files/zt/WBNJgYFbt.jar --output-vdex-fd=44 --oat-fd=45 --oat-location=/data/user/0/com.owc.mgrpca/files/zt/oat/x86/WBNJgYFbt.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4230

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

WBNJgYFbt.jar

Path /data/data/com.owc.mgrpca/files/zt/WBNJgYFbt.jar
Size 955KB
SHA256 3c9d7338e865676745afa3a93af2cd6be78bcb539862c4eb2ca0a872d1b3bc10
MD5 0e9ee08f38e62f125ff8047454b50e91
SHA1 3d72e0a3b60fefc7c6fcf27ee50cc59cd8aa13ea
SHA512 976dc3f2062429556eef2d5322098cec1053864c2e3b46651ede307851d872e6cc53a1ee8a7894c6582f81f5f3511c01438b25e76d24f2785b5f03883d871dee
SSDEEP 24576:///4eiMPJXcCOoL0fwg8oUAgQMer+/fCocZN12p:H/4eRPLiwbD/Q6/KocZNMp
MD5 SHA1 SHA512 SSDEEP

Submit Download

WBNJgYFbt.jar

Path /data/user/0/com.owc.mgrpca/files/zt/WBNJgYFbt.jar
Size 2.3MB
SHA256 14bee5765cbb409b9edd373259049a9a923185900c0d7032354280f3bd72ebab
MD5 7ea15a2f1014f5f995f5009541941f23
SHA1 182d32d153e4b554a75a7f6aca4f082ba772bce5
SHA512 191e09cd86f01f061faa2164db8f9970a5e32e68a61a0e83f1e6cc73ae9e1afd9a6b926e0eb0744eb105c5d2020bc4e97eab5a8fbfdcc72aaf76aab2350f3450
SSDEEP 49152:7DYjv/svskk3U0U8UAduS0qecM7X2lwpj3n5txXOt7zv2I:7DYjv/svskk3U0U8U2wpj3n
MD5 SHA1 SHA512 SSDEEP

Download

WBNJgYFbt.jar

Path /data/user/0/com.owc.mgrpca/files/zt/WBNJgYFbt.jar
Size 2.3MB
SHA256 6f9d52448d397eba526cc2244e5676f197b90aed3a385f99bb4c476af26304c6
MD5 2fd35db6fb279ad7fb384c55ded82adf
SHA1 36ed73864983507c15685f54627e670cc63e07e7
SHA512 59c3257d624f0bba67ed79781c5091b25a61dd3da4b93b26c216cfa914e9ce494806bed52d511113a0fe9197f2317256360797998752e3fe2ec28a4c52d14853
SSDEEP 49152:7DYjv/svskk3U0U8UAduS0qecM7X2lG8o/CZKGt7zv2I:7DYjv/svskk3U0U8U2G8UD
MD5 SHA1 SHA512 SSDEEP

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads