4d242f3c0cdf920233b983782a19b55e245bfcda1de290568e8d5ff82a81be0e

Analysis

max time kernel
124s
max time network
136s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
23-05-2024 09:52

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6a8cdd2b8d0bead696727d7e26ca5a7c_JaffaCakes118.apk
Size

1005KB
MD5

6a8cdd2b8d0bead696727d7e26ca5a7c
SHA1

6f32efb32e09990d7a350802acf1351439a2005e
SHA256

4d242f3c0cdf920233b983782a19b55e245bfcda1de290568e8d5ff82a81be0e
SHA512

419fc8ed69dcfc57c8f530bcac2382ec3dd137764c7b0caf4f1d894d5bcf35496ddcfa4ee35caf66f4cb53d09ace47e38e9f7e8a8324bc3dd27ce9987d7bb201
SSDEEP

12288:RmTrjb6OjXeHfIJarWZdlKwlanGJXSDDDZYfG6Cj87bHQYW4w4C8IcJLrIQYQuWu:4614DZdHFrzC8IcxpYq45w4Xw1jNuvw2

Score

7^/10

discovery evasion

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.uniquestudio.view

description ioc process

File opened for read /proc/cpuinfo com.uniquestudio.view
Acquires the wake lock 1 IoCs

Processes:

com.uniquestudio.view

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.uniquestudio.view

description	ioc	process
File opened for read	/proc/cpuinfo	com.uniquestudio.view

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.uniquestudio.view

com.uniquestudio.view
1⤵
- Checks CPU information
- Acquires the wake lock
PID:4280

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.uniquestudio.view/files/mobclick_agent_cached_com.uniquestudio.view

Filesize
100B

MD5
40edcfa1ba32157e593180e473c1a878

SHA1
089b807b3e24bc085896faae16acd8409bfbac30

SHA256
b709001e02c3347a4124aab7ae937328ed8bbf47f050104cf86dbc4f16c15fc2

SHA512
12b6cf84702c801313ba05ff6b2ca949e7dd06ec737cd0c8892ae5e6df4faf0f2ac65657b44e3ce92fe0b1cce796ab65985a586ec60dca494a2014d866d11a29

Download Submit