bd0c51d6694dabd0c86a717b78af543b86f6c429c412e42b4064fcae9bf65c0a

Analysis

max time kernel
3s
max time network
130s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
26-05-2024 03:46

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

743c7b981b95dccf79aebaf29c7d0d8d_JaffaCakes118.apk
Size

6.5MB
MD5

743c7b981b95dccf79aebaf29c7d0d8d
SHA1

eb99630b06dca9ce481a27d556f02d4925944d14
SHA256

bd0c51d6694dabd0c86a717b78af543b86f6c429c412e42b4064fcae9bf65c0a
SHA512

6ae433bf3437609a7515a284aa765a0d3596fabdf299553224cce331850375592428070b4a103c05b3f9c4e4d638c6d610c7071ec0112db3eef63e51f2f6e057
SSDEEP

196608:3I3rBevERvL8qu22O+XZcQ+hxcgi49j+UQLEu4:3cG4m22OqSQ+hxcgibUQLEu4

Score

7^/10

persistence

Malware Config

Signatures

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.j1game.flight2.zyf

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

com.j1game.flight2.zyf
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4286

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/storage/emulated/0/.android/.crash/crash-2024-05-26-03-47-05-1716695225242.txt

Filesize
5KB

MD5
f651da6f3954689c37409ba71fbe4af7

SHA1
ee5ad2a632dadb162b2ed0d84d918bd6f8adda23

SHA256
9b946c168c294e55ee1fa779df1e99e4f564be5ae494e83e1e2251b437f97312

SHA512
b36343f1b1bfbaef865d112658c3ad3d2c9db02a66f5fea4feeb82065e11990c85b62727b22659ad2197acdad0f99d1e9da718850c50d6f0a96e713554aa871b

Download Submit
/storage/emulated/0/Android/data/com.skymobi.pay.app/plugins/com.skymobi.pay.opplugin_V2017.apk

Filesize
189KB

MD5
7ca433f40d2e4d750cd5d19e0998e005

SHA1
dbb1f221cb279c9c067be19ae2756a1c9b5b67c8

SHA256
dc55c0952f54064f229d4105fe09178ab2061dba5ac33a78ac76bd711bfaeb0d

SHA512
a561bf5401050c65c5f227b3457d76bd48c4182ecfba5213b02800fc7072b209ee3baf25d024a145314503f946773dde8fc0e17907ee618286fa42c8ab323404

Download Submit