Overview

overview

8

Static

static

6

693210bbb9...18.apk

android-9-x86

8

Analysis

  • max time kernel
    35s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    23-05-2024 00:49

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    693210bbb99f6e229e77d06dd8a330ea_JaffaCakes118.apk

  • Size

    23.4MB

  • MD5

    693210bbb99f6e229e77d06dd8a330ea

  • SHA1

    d7d13cdf92092a44b4414d4769dda5ed5119b302

  • SHA256

    aa6a1ded9eedeb72a1c8b8149094c1cf97ce38d0c540600ad4fbc138bfc7db88

  • SHA512

    2197ec71abdbbdd173d767079d1455e28b025edc873ef1c8482e2079ef4dcb22f27785276b77e47f8229d7c01f79fa674b04a6c1182e1bae85a41717362ecf87

  • SSDEEP

    393216:rKy0ZDhvVCBgc2dNS5pbq+xbnh1OrxK7gDcvVRLyWi1YsC+fgaS1aTvVcSJKzpOZ:rcZhvVCGtPGpb7Nnh0KO8ROt1NfjuaTV

Score
8/10
bankerdiscoveryevasionimpactpersistence

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
    bankerdiscovery
  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

    evasiondiscovery
  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

    evasiondiscovery
  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
    discovery
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
    persistence
  • Checks if the internet connection is available 1 TTPs 1 IoCs
    discovery
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
    evasion
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact

Processes

  • com.absologix.navy.commando.strike
    1⤵
    • Checks CPU information
    • Checks memory information
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4274

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.absologix.navy.commando.strike/app_data/imai_click_events
    Filesize

    123B

    MD5

    ae4838e45ce09a7a6c384980a94bdf95

    SHA1

    75d41e4e732e9d15b94b20906fa3cfb9672698d9

    SHA256

    ead35df08931af5af87aadf88e864f7e8f0c8e88fe44de9058eea967b0695aa5

    SHA512

    f9e3f86988c28f401d7b766394408c4be9de9b27db6a1cbd24ed32de7fafff1058bcf267a141d2e519bf2149ff55696d77be557ec9ba84b63147e680ca189aff

    Download Submit
  • /data/data/com.absologix.navy.commando.strike/cache/inmobi.cache.data.events.number
    Filesize

    1B

    MD5

    cfcd208495d565ef66e7dff9f98764da

    SHA1

    b6589fc6ab0dc82cf12099d1c2d40ab994e8410c

    SHA256

    5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

    SHA512

    31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99

    Download Submit
  • /data/data/com.absologix.navy.commando.strike/cache/inmobi.cache.data.events.timestamp
    Filesize

    10B

    MD5

    a0f4bccf2f1b0615c2d496e7c204790c

    SHA1

    5556af70b9b0f6dd179bdf87f5df81bd94a8eee6

    SHA256

    4fafc618dc543a36a2a6042c1c46a684100a732396fc3cd59ab4d7dedfc0b88a

    SHA512

    eb6dae6df56f4bcc023f5c8132ec540c99aa63b5f599a1edc9c74b4b1f7b87ac7c617cc494fa004e1e01c86c27557e88948006e0c9c574e94de8fc80bd685439

    Download Submit