Overview

overview

8

Static

static

6

6bec060cc0...18.apk

android-9-x86

8

6bec060cc0...18.apk

android-10-x64

8

6bec060cc0...18.apk

android-11-x64

8

Analysis

  • max time kernel
    177s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240514-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
  • submitted
    23-05-2024 18:48

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6bec060cc0c3aa7ddd3d4de005dbdabd_JaffaCakes118.apk

  • Size

    602KB

  • MD5

    6bec060cc0c3aa7ddd3d4de005dbdabd

  • SHA1

    a8e7abe5e7aaa8a0b6d52aae5ee6d4c1c9e2380b

  • SHA256

    75ef78181b828392c9d8ba2fb128cc71d3a20217f7b35d9b9eae5e25a260b5bb

  • SHA512

    45b35235249716bd2d1b1132ebcdd10cf9f0c24d7017bf34c39a8d630d8ce4e2602f19f69d9c7d1d087739819baeab1b0ae6a00ee83f426f88429c23e04e917d

  • SSDEEP

    12288:AuEaFZvkGGNUuWW1NVwCKn6GAx1d9H1BxyMGl9fDHxUNYL0NpX79s:PEaFmFN9v46flH7xyVfNGFf9s

Score
8/10
bankercollectioncredential_accessdiscoveryevasionimpactstealthtrojan

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
    bankerdiscovery
  • Removes its main activity from the application launcher 1 TTPs 1 IoCs
    stealthtrojanevasion
  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

    evasiondiscovery
  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

    evasiondiscovery
  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact
  • Checks if the internet connection is available 1 TTPs 1 IoCs
    discovery
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact

Processes

  • feifei.tnd9.meta.face
    1⤵
    • Removes its main activity from the application launcher
    • Checks CPU information
    • Checks memory information
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4577

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/feifei.tnd9.meta.face/app_ttmp/t.jar
    Filesize

    276KB

    MD5

    9aaea567e0c93e51718ba7eade0e83df

    SHA1

    0005116aad1779361b70093db00fed5ac090ae23

    SHA256

    b30a95dff6f65f444472971c8aaf895ffc8e66e0117ce242ec4cb8a8a519a5ec

    SHA512

    2aef1034335d8752f4e25ce6c5823ce03019536cc6e51ee61b5291c77a0f356a2517e0cbe7f2c4cc2d897115dc856449a342cfdc247c9d34d313187d15b2f890

    Download Submit
  • /data/user/0/feifei.tnd9.meta.face/app_ttmp/t.jar
    Filesize

    587KB

    MD5

    f72c3d07507c3e26d317e9117ba757d1

    SHA1

    cdede4739e9dd9fd95243aab5e44c24f93f825c3

    SHA256

    1c65834d9ca018c6496a8b9957589d0e94657911b6635dc21a448d78f9238887

    SHA512

    3420714252e7503abc13c99274d767b0bc08671d769460dc61823ab9470e145fb75c5dfaadc617d3a05cf251ed5ecf38ea7e8c1d7b343bca4d7e8296f1b805d4

    Download Submit
  • /data/user/0/feifei.tnd9.meta.face/databases/feifei.tnd9.meta.faceb
    Filesize

    72KB

    MD5

    b778a805decd6dd0674580862e0eb11a

    SHA1

    e8d30d0b953737e891f66236fadb4f45b0ba8526

    SHA256

    f3b8c2a47727cd32ead975395cc42bf5851ec10e9011697f0c5b19549ef3d3ed

    SHA512

    4141c96c355e9eb33f459e62f38834e6410e916107a42a8cc8ba2c5d66b0ba2744ed22d6f17e4623c7a877fd969ca6c14ba201ef2b23536f55a8e027eb767081

    Download Submit
  • /data/user/0/feifei.tnd9.meta.face/databases/feifei.tnd9.meta.faceb-journal
    Filesize

    512B

    MD5

    6a87019ed8f9b535ae66cbe7de670dc8

    SHA1

    0ce735116b709a6b127d9e99e2ccbb82b6c3d307

    SHA256

    1564233e7ba42564ffec3f385c9701729fbc06102771270675e50b955ea0dba6

    SHA512

    0dc323762e1d6d7029c3f90b9a245a7b06f2b58158c0674b9d93b07270228b0d74f8727ee1cf6d28aadb15b8b4f7c673e01a126ef22dc92df53ff6a7502e2afe

    Download Submit
  • /data/user/0/feifei.tnd9.meta.face/databases/feifei.tnd9.meta.faceb-journal
    Filesize

    8KB

    MD5

    5ac1dba0fd44ef6ff72f796279cb4152

    SHA1

    156c8555e3deaa9edbec61fb244626f9472102eb

    SHA256

    08fa3604d1f877bb02e6f5dbda1affa1426dde7dd653e7c031ffbc68b4cd700b

    SHA512

    1a8517c2496b111b6bb706d839d27c00908d7dc5873a6f20173959f41b3aafc56531ed87692751253e98385990a02090b7d5658671aab04bbc618c3983a6c5ab

    Download Submit
  • /data/user/0/feifei.tnd9.meta.face/databases/feifei.tnd9.meta.faceb-journal
    Filesize

    8KB

    MD5

    5c44ba356d3cae9d7b13f850975a1d99

    SHA1

    e7741950a92a006bb3d911e92d0e98b4fa3a2336

    SHA256

    feea272394d6ed445a4469aec093135d6b0b267a7f6e9bf4ba2e009eaaa2a27a

    SHA512

    b693a0d3f55576603ec895d05b23231c8b083f49b1ec59822bfab6d2a734acfdecd6be333767158b75c16cc8153138266429fed63d3e3ca4262ca1e19c7041db

    Download Submit
  • /data/user/0/feifei.tnd9.meta.face/databases/feifei.tnd9.meta.faceb-journal
    Filesize

    12KB

    MD5

    2269b8c5e6f877cec1cbff50ad4cff66

    SHA1

    69b0b069a10db2451d225d058cb0968d08400d2e

    SHA256

    f026a2bebd6104a9c7c98f5371a367f4706f0e69d687c156572990a195dca85a

    SHA512

    a0934ccf0d9382a6e3ce13679c4b4df410f5f8db7646483f929c98635c9f2bb483ea60cbe94c0e80043bbdc3d6e3d66c26bda99c7f33d438125ecd1b7979f931

    Download Submit