4301bdff0b0a6a9b92800f53c43c2ecf727b5c63068beadb6fe218655a05524a

Analysis

max time kernel
170s
max time network
178s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
21-05-2024 14:36

Target

63a4693183833b1a254a16f6222cbe43_JaffaCakes118.apk
Size

31.1MB
MD5

63a4693183833b1a254a16f6222cbe43
SHA1

ed8301894954b7a05bd8c9fecb28e318281aa49e
SHA256

4301bdff0b0a6a9b92800f53c43c2ecf727b5c63068beadb6fe218655a05524a
SHA512

01c2caea8ae504d697bae1a150807d9209b351630531dda40b95775b5f9cd2f6c6600702ed200a30309820c14bc30691d12d6407f33bc435930764256f7dd0a1
SSDEEP

786432:i4FyeO5+FzDT3qkY6lwBak/cdhBFYLsbEllTaLQUv4CBu:cr5ynaKqEkUdCYIllTXUv4v

Score

7^/10

discovery

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

System Network Connections Discovery
T1421

Processes:

com.mango.sanguo15.sjws01

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.mango.sanguo15.sjws01

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.mango.sanguo15.sjws01

com.mango.sanguo15.sjws01
1⤵
- Queries information about the current Wi-Fi connection
PID:4550

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact