1a37b16d83cd8f68ddea890bca33ea9473b04b6d9bf076d401e67dfe6efd21a5

Analysis

max time kernel
121s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
19/05/2024, 03:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
5846c47919a69aa31701b1815b2ee599_JaffaCakes118.apk
Size 715KB
Sample240519-dp3f6afd8x
SHA256 1a37b16d83cd8f68ddea890bca33ea9473b04b6d9bf076d401e67dfe6efd21a5
MD5 5846c47919a69aa31701b1815b2ee599
SHA1 01b75ee468c432ec93d58ddbb68a1f1f2f0688b1
SHA512 6f8bed466818713a11fd66ee75f03510d27a19aaae5730a745754a33f9eaf469afb21539584342e61b11ab383fdc55956efdfd399d2e59d4e479b14880cc7038
SSDEEP 12288:HFKo444o44SULxFlq+HFhbg0ViG8kJ3xEAbd1eT1FXZRmQH4840zt1CHgbiU2E6/:lZ9/9HJHejXGQH4wZFbisuD+QAu
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery persistence

Malware Config

Signatures

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.clock365.byzm

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.clock365.byzm

com.clock365.byzm
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
PID:4203

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

alarms.db

Path /data/data/com.clock365.byzm/databases/alarms.db
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
MD5 SHA1 SHA512

Submit Download

alarms.db-journal

Path /data/data/com.clock365.byzm/databases/alarms.db-journal
Size 512B
SHA256 2bd92f8d50cc453d1d4066a00335283603e9e5e6e2de4599d979ca00e6600de7
MD5 d537e15554058ae032e7101f6be5b833
SHA1 3ed21dfe5ff174b38ddc8f947f9753be3ad24c1d
SHA512 2e823f794e7abb0cd85f48577a10aced32d03d83ee5f7906f7bb560e84b646253deea18b5511dd88710998a62baa82b61708a14c363014f01b32ef396e76fe93
MD5 SHA1 SHA512

Submit Download

alarms.db-shm

Path /data/data/com.clock365.byzm/databases/alarms.db-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

alarms.db-wal

Path /data/data/com.clock365.byzm/databases/alarms.db-wal
Size 28KB
SHA256 1e5745a0864c864716a44db9fd7764e744ad25fa471b01b02cbae86e69742391
MD5 153bad6dfea32a8271b364984e9cd520
SHA1 c53ba82e8219042c1de00811eb9bbda169443891
SHA512 ea72af386a9929618e91520729b58e9a0a9b0e783eb66b0d58f5aceb624eb3cc1b1a789bb60e388e5a343bcd7ea0d86e97ce629d60a985f43401e9ab977d2713
SSDEEP 12:KoTZV4lvqzdTRmBEyPbP/ieAyoAIWOwCla4hgbCs1yyoJlxY5FFjRmBEyPbP/ilI:K2WqzyGSP/PRouGPsJSlxIGGSP/0kdC2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads