4d242f3c0cdf920233b983782a19b55e245bfcda1de290568e8d5ff82a81be0e

Analysis

max time kernel
126s
max time network
153s
platform
android_x64
resource
android-x64-20240514-en
resource tags

androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
submitted
23-05-2024 09:52

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6a8cdd2b8d0bead696727d7e26ca5a7c_JaffaCakes118.apk
Size

1005KB
MD5

6a8cdd2b8d0bead696727d7e26ca5a7c
SHA1

6f32efb32e09990d7a350802acf1351439a2005e
SHA256

4d242f3c0cdf920233b983782a19b55e245bfcda1de290568e8d5ff82a81be0e
SHA512

419fc8ed69dcfc57c8f530bcac2382ec3dd137764c7b0caf4f1d894d5bcf35496ddcfa4ee35caf66f4cb53d09ace47e38e9f7e8a8324bc3dd27ce9987d7bb201
SSDEEP

12288:RmTrjb6OjXeHfIJarWZdlKwlanGJXSDDDZYfG6Cj87bHQYW4w4C8IcJLrIQYQuWu:4614DZdHFrzC8IcxpYq45w4Xw1jNuvw2

Score

7^/10

discovery evasion

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.uniquestudio.view

description ioc process

File opened for read /proc/cpuinfo com.uniquestudio.view
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

System Network Connections Discovery
T1421

Processes:

com.uniquestudio.view

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.uniquestudio.view
Acquires the wake lock 1 IoCs

Processes:

com.uniquestudio.view

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.uniquestudio.view
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

description	ioc	process
File opened for read	/proc/cpuinfo	com.uniquestudio.view

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.uniquestudio.view

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.uniquestudio.view

com.uniquestudio.view
1⤵
- Checks CPU information
- Queries information about the current Wi-Fi connection
- Acquires the wake lock
PID:5193

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.uniquestudio.view/files/mobclick_agent_cached_com.uniquestudio.view

Filesize
100B

MD5
16fd78d9d5798bcfa6251ccc67e75fee

SHA1
37d5841d57265d77f77aa4cb3d32f93fecf4db0c

SHA256
442aef66f9789fd4964c193d86908d892910b65f98e95a48a08ae3e7b0a9fe0b

SHA512
4fd3a4fc072a5cff1054cb8ae2745daf0a060c972c3568d6d1eb8e0704ee8265741f9e47306ee2092271f4a6d772a651a130ca1d7eba757ce42ed8e5b8254416

Download Submit