Overview

overview

7

Static

static

6

65d021050b...18.apk

android-9-x86

7

65d021050b...18.apk

android-10-x64

7

65d021050b...18.apk

android-11-x64

7

Analysis

  • max time kernel
    4s
  • max time network
    144s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    22-05-2024 03:12

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    65d021050bba08457209744235737fe2_JaffaCakes118.apk

  • Size

    5.9MB

  • MD5

    65d021050bba08457209744235737fe2

  • SHA1

    901e71564a29a26535bc4d3d64878a1aff859acb

  • SHA256

    68d02913ac4620747825bf163dee15bd13eecb0cd4d2ecf433f54fa2028de4f3

  • SHA512

    824eaecff70c7aec1ec76f50063553c1c67e154ea4706b1f2f48c2aed1fead267903feb5924e4a98d3606406d9ddab9d970de421a520ec9f597b260c27e020e9

  • SSDEEP

    98304:B/TEwjGru+008VhEPUF433Sf/pk9Q4BfuwBfDgey/9hue02NKt7IJ5PtWiPtfW:B/wiGaZDoUa3c/pkW4puwhgpY2NKiJte

Score
7/10
discoveryevasionimpactpersistence

Malware Config

Signatures

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

    evasiondiscovery
  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

    evasiondiscovery
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence
  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
    discovery
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
    persistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact

Processes

  • com.zteam.doubletap.new2019
    1⤵
    • Checks CPU information
    • Checks memory information
    • Makes use of the framework's foreground persistence service
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4273

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /storage/emulated/0/android.systems.zgtas.fza/systems.txt
    Filesize

    152B

    MD5

    32d248bda123b21ec3f08c65c9ce4001

    SHA1

    24926078a13f52a47560237a20113fd947f41b25

    SHA256

    e1e5e80ed10357cab2e8573895c28c5877d5eec09cb4535637b2fd2263f44dea

    SHA512

    96ceea44a16c2d3395d07e26a5f822f6dfd149b8634665f75b8c3767d02d5c3c273b5fa10b970f6371d0fd9c65e97fc77a4f593fbb1d28e2000b75dddbf23142

    Download Submit