a76d998bdec295b5edd86fa0fb38978862cdfe8de57f9ecc152769a628bd7e10

Analysis

max time kernel
179s
max time network
132s
platform
android_x64
resource
android-33-x64-arm64-20240514-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240514-enlocale:en-usos:android-13-x64system
submitted
24-05-2024 09:15

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6e02ac4c6cf71350ba8aeb7db6a7c0b0_JaffaCakes118.apk
Size

11.4MB
MD5

6e02ac4c6cf71350ba8aeb7db6a7c0b0
SHA1

da9464111b3ffe3677bc60eba512c80e3bf1d3b8
SHA256

a76d998bdec295b5edd86fa0fb38978862cdfe8de57f9ecc152769a628bd7e10
SHA512

351bab467add06bd22af1d2f2efe9b16cb1da42f6f637360e03d2d236aded19e81fda4bdfdfcfc971dbcb3af785d9de6a5704c2f3d423015881ef864e1793e61
SSDEEP

196608:5DYXa05tUGKR1vt8CxSyC469GweJ7sDmELFiZmxB+37FHtLOzBTjnPxo:5kX5UpXFrxZr69WJ4xiUnC+zBTjPO

Score

8^/10

banker discovery

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
discovery

Process Discovery
T1424

Processes:

com.llkj.e_commerce

description ioc process

Framework service call android.app.IActivityManager.getRunningAppProcesses com.llkj.e_commerce
Checks if the internet connection is available 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

com.llkj.e_commerce

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.llkj.e_commerce

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.llkj.e_commerce

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.llkj.e_commerce

com.llkj.e_commerce
1⤵
- Queries information about running processes on the device
- Checks if the internet connection is available
PID:4292

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.llkj.e_commerce/databases/ThrowalbeLog.db

Filesize
136KB

MD5
49c8acf28298353850f3c1cdf41c8c69

SHA1
6c733ccc4319e29886af4ed8056df5dda0372666

SHA256
9e5da057a323fd5dec7f08947da1318b828d3d6b77b6b0028ea32af70d041969

SHA512
62efec287c24891ade6c8f04d72698d1420395a39090a62abcf370875e0afa89323618383940107348123b1cd0e64a8757d041691f75f27c55109dbb91d990cc

Download Submit
/data/user/0/com.llkj.e_commerce/databases/ThrowalbeLog.db-journal

Filesize
12KB

MD5
742a3615320acad6320b07e2c9fa2c71

SHA1
889db68c8c49cba579483a4503322ce855c007de

SHA256
9312c327214b2b48567c809db8af687ef082db59fab1d07670b55fda0e5c4539

SHA512
801c73d2e68939ad6774b37209ef6aa7958b5acdaffdc30fb3fbf7af7dcbdf6d4807f9dbcb2e46c534b7c8b1ca099d93a12ccb95e520872d3a8c89790d70eada

Download Submit
/data/user/0/com.llkj.e_commerce/databases/ThrowalbeLog.db-journal

Filesize
16KB

MD5
333bddffab1005bf974b15a0d0add273

SHA1
628c7ec0ec5835fededbf64ec9db841ebe408bb2

SHA256
40bb864a197156094222b568f045ffbae22a423e75ea62784e8ecad7af0fca04

SHA512
3a7f372892971077957336de188edbfd77189e2ebf37f7c6c4480f7cb6c6df02be8108a176d5860e47042424ed05eb087395aebfdf649467b8ffee7cd6545313

Download Submit
/data/user/0/com.llkj.e_commerce/databases/ThrowalbeLog.db-journal

Filesize
512B

MD5
939a56d17805c305836583f77c375f33

SHA1
942ee9adc3653dd277960fdb0e84f184798ce1ac

SHA256
0cecfd69e69c444701941d5c6fee08f36b14bece0e2e495fd53f0277f7e68297

SHA512
3cb505a041c729d31d8a02d697baf4744577237d186416121ab6dfb412091e1a99322b9a80aa30832361fc1257f1e15a8a46dcb437822b88fdccef96b5c99eb9

Download Submit
/data/user/0/com.llkj.e_commerce/databases/ThrowalbeLog.db-journal

Filesize
8KB

MD5
991dae51694d9dc567e0b9c13bcf6fe7

SHA1
c87706766ab3765ecfd05769e92f263bf8ecdbdd

SHA256
92364181a73ab399ea585cecf7ba7e6f6bc9ec96dc4069b0477a2594ee987121

SHA512
019dc8f507d70904789fba819f84873dcac09ab748fe5f0632b60a00268092103ed0ec620252cc1b69e4c6a20e9566a59765828f1e4e0d5f5a2a199953834a02

Download Submit
/data/user/0/com.llkj.e_commerce/databases/ThrowalbeLog.db-journal

Filesize
8KB

MD5
ec616a8920561e050696a9a996292624

SHA1
274a9e8787e06a35d6d93ea192d2d8f86ba4050c

SHA256
bf18146dc1e1aa7296e61dc3fd96ad1ffe9c27fc36004187a6d294567189a7b8

SHA512
330c6d4359905f0254bbcd632d11572a6643fa7724752a97441ca498b7cc6fa416fdb23b32f401f8db928987172dd66e54018376ce1e0b0eb8ea16b5f99ab80f

Download Submit
/data/user/0/com.llkj.e_commerce/databases/ThrowalbeLog.db-journal

Filesize
12KB

MD5
525c48c61ffd3f46fb5bd1aca35214ce

SHA1
3a9eaebf0aee6b98e1b72ffd04356901b8700886

SHA256
5295b7831d7eb4ea33c99571a9cb9a51e5a84e40838eb21f43fef3e0543c5d6b

SHA512
fea91528167e0d22bb8254ee2aeb4a2252d9190434a2fd2d9726aa9fd058c977952ea8eecc92ae701c8de355144a55addb09ab45cbebbe3b7c60794cab72d2a1

Download Submit
/storage/emulated/0/Mob/.db_accache

Filesize
333B

MD5
c5ca923cac1d46ab38d2332f85b19b7c

SHA1
d49c4767fdf038c59be6dcaf5b7300265001af31

SHA256
3e51d197463bff432e1312a43a71473d54625785aaa39b54fa7397f5db0fa221

SHA512
c5ba21592c7fdc6a5ae76b4b6972287fc6320c8f1047127e07c3f7fd53fdb6742368fbc958066094368f2628ac893e7acfb9954b1fbf28453a000e8c2eb50791

Download Submit
/storage/emulated/0/Mob/.dk

Filesize
107B

MD5
893bb9930a6efdd3211826f4114b5a29

SHA1
57b8895adcc3bbfec87268d5f004cdaa6caee8cd

SHA256
45e6cf5549bc12c1150b2a10f20de32ec5b86fe23221536eca2cb2a43b1e2d21

SHA512
78f094bf00c6b440a57dc5b8edc10c3abf4fac63176dd64a54b2e7b03d9973485504d619ae80312fed1bc72db9f1617a990f37edc7bfdfa032ae47b054939010

Download Submit