Analysis

  • max time kernel
    13s
  • max time network
    129s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240514-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
  • submitted
    23-05-2024 09:09

General

  • Target

    6a7119b1f4aa1844d0843517da16a866_JaffaCakes118.apk

  • Size

    24.7MB

  • MD5

    6a7119b1f4aa1844d0843517da16a866

  • SHA1

    dcb894405cf07416fa2034ae9b8e6848ed033828

  • SHA256

    dc87558c27adebb3d1b8777e5faaee1f1f265194ce9e9b67f660d7c59a038bdb

  • SHA512

    f762e63d90baad8e284f82eb0080a9147252fe3e31be9764481575f9b088a3ceff8eae6ac05e3fff2b0ecda36ea0b3538c20b70a8b86e2e23f2e2ec6fd396f94

  • SSDEEP

    786432:xYaIGiiavq0qmVHZzYyrmXBp6KnMvhh1FS10G:VHayAVHF/rmXBp6KnMby

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 4 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.mmol.pidioms
    1⤵
    • Loads dropped Dex/Jar
    PID:4490

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.mmol.pidioms/files/prodexdir/.updateIV.dat
    Filesize

    12B

    MD5

    2005fa2d0a4db9e9f3f655f1b6c7a4c0

    SHA1

    2c1539d72540697290fa9b04d18d28c606d96cf9

    SHA256

    a08e78e92876684aa47265edec4e49ac8be9732cd8ed4a95a79a8510bc48618c

    SHA512

    8fd9227bb0f990b9b6c557b8fcf76b4907347526e1f3cfb8b01cc9322cbd2f4db7982b1c9a0953af5dcd10d7255efa709daa37250c97d78678eb2050e949fdf4

  • /data/user/0/com.mmol.pidioms/files/prodexdir/00O000ll111l_0.dex
    Filesize

    7.8MB

    MD5

    b80fcfe0e9f2f07caa3cbd60eeb7982d

    SHA1

    546a8907260daae8728c518a5b3ab7c025218e46

    SHA256

    119ad51d690174067b8093eaaf34d500776bdee60f81674f0b0b1ac09fd17709

    SHA512

    360569877fcfed6c0cb2fa6173ddf89ff154c0d23f3224819c2003810b6a68f634f8a9ce84670b8078ed00a5a2697b6146de3ad3ebc97045013b4850e1ffe9c4

  • /data/user/0/com.mmol.pidioms/files/prodexdir/00O000ll111l_1.dex
    Filesize

    7.6MB

    MD5

    2b1963754a8295db38e2fc07dd52aeb2

    SHA1

    973c4bbab01dc647ccf992bc7dd4476d769b25b7

    SHA256

    598933712a45a270fd1152bf7a5518070a0a26661a14f9b41aeaee9007b08146

    SHA512

    a2cec878b325e3adfdcb52c01dd939e0bb599eb7e7476b17a097b5cd23ed542fab58741cb100c3bb7af225bf1051f98faaadf3c14e956fc8abe2afd03997da9d

  • /data/user/0/com.mmol.pidioms/files/prodexdir/0OO00l111l1l
    Filesize

    7.0MB

    MD5

    b7986afbfbc868ae259b365536a08df0

    SHA1

    151f45bfcd06b1f619b81e9f55ce5264a87387ac

    SHA256

    92dc78111b78208b100d23cfa216961dd699b3dfcd3c6ccaca09cb1df6392935

    SHA512

    e0cc27dbd0ae12e44afb4541382203bead10265c28e4f85eefb0c0a60873d81c7d6aa55f4bb73c1b762774dbc03ed39c3d967cfabead78125f63bc1ed98b3f08

  • /data/user/0/com.mmol.pidioms/files/prodexdir/libshellx-super.2019.so
    Filesize

    268KB

    MD5

    f7554c13ef25d97cec4aa07c08109dc2

    SHA1

    62067dac26c9e377c0639ca6a41768ca31c206a2

    SHA256

    8b25fb1ace45324aaec5d37bfbdb9eab7833fc3ac41de2f8dc599723b4b13b8f

    SHA512

    b4542b648bec6a586ecf4f2cce13540b97f8d63b17464e0a836376878ea9b9caee184e78dc107a5c5286783adace734e32fe3a9b95e48a1a4b8b1764b2f4f4ca

  • /data/user/0/com.mmol.pidioms/files/prodexdir/o0oooOO0ooOo.dat
    Filesize

    120B

    MD5

    87452ecd3d4de338f0af86e8cdbbd96d

    SHA1

    9373f329beba2a7b14c60e41c1429557a668bea7

    SHA256

    c81de4697c232132c3d59018e4dab7bdc0284d302383334c682052067e2b4718

    SHA512

    f2e1a45eb501d1b87f6723d6cb2ff1f9ed9b1e56aa4e963284265eb9c54c51783db5c9ac7dbf9fb7de95aaef9a29474c805c31a55f18a7b678ef0b9c11f03ce3

  • /data/user/0/com.mmol.pidioms/files/prodexdir/tosversion
    Filesize

    31B

    MD5

    05bdf17580c82df6d813b601aa3a0145

    SHA1

    611c3605977d64d8f555eeba153dfc5932c9322a

    SHA256

    091d5182e515e8f81c474407e1d90f72cf0ab2968b8ff3a3de1abbff6fb3fde5

    SHA512

    1dfd873dc8f30085f929af1fc0bca8697e875b95350c40f8703be410984bc05ff1163b7f95f3ba96d9d09a1c13804d00cc8820aa2f49b8cbe4e56e495fbac273