b5ee5dd9f0cb2828251c387bf1c1f333da706b66b53972ca9b140259bd4219e9

Analysis

max time kernel
9s
max time network
137s
platform
android_x64
resource
android-x64-20240514-en
resource tags

androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
submitted
27/05/2024, 15:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
79a76edb82bc0d6f4d66e34f56e4022b_JaffaCakes118.apk
Size 4.4MB
Sample240527-tctlgsaf57
SHA256 b5ee5dd9f0cb2828251c387bf1c1f333da706b66b53972ca9b140259bd4219e9
MD5 79a76edb82bc0d6f4d66e34f56e4022b
SHA1 87e29564f1b08b451c8f5b0ca6e51f3c3caae402
SHA512 0f020a323f4da67652423257a28437a4ee18024d0169d77ff0673822aec86af8680de3fba345452650d6dbfe05d8342915c93f74bb1d25c966aad741af299ebe
SSDEEP 98304:VL3poecuT4tkt/Ps+2dyacf5m2/wYomLN7q2pYs:VL3poecu0tkt/Pd25cf42/wYomJm2pYs
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

evasion persistence stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs

stealth trojan evasion

Suppress Application Icon

T1628.001

pid	Process
5119	greenway_myanmar.org

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	greenway_myanmar.org

greenway_myanmar.org
1⤵
- Removes its main activity from the application launcher
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:5119

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

rg.stocks.positions.db

Path /data/data/greenway_myanmar.org/databases/rg.stocks.positions.db
Size 28KB
SHA256 ff81e1c664ea6ef6c93f8bc4bbe4ea953209e596edea64e367df10c7321bfafc
MD5 0264beddffaa7477b7bc80c41977ddd1
SHA1 065238021ddf1afe32083f81bc6990fba46cb667
SHA512 16f890fedc115582852f0204b7f8dc3b49872125eb92c0c6419749209b76c5a905acb6fa0ed194a75e271279e3828ee777b199f6ee4ea9f1065a1882ea5b700c
SSDEEP 24:TLna3nWxfqJ9ZZaUFOvQbyPZA01qGSiGQQ:TTUnDKU0P311S
MD5 SHA1 SHA512 SSDEEP

Submit Download

rg.stocks.positions.db-journal

Path /data/data/greenway_myanmar.org/databases/rg.stocks.positions.db-journal
Size 512B
SHA256 9d115eedacf5dea35a6b8ec8b25c4a8b8d98e8b8a00eb0afb3dca313e2c07734
MD5 1976a028b11f5036b23c3bd9d406292a
SHA1 6ead1327d84437356e216efbc81329a97a574dbd
SHA512 39e27407f58013e1159b13ec73e1451648613bd4da44b3ffe61544e4e9f9c0fe09a1d5edbad80de6a7aaa555418d9613eb15295de12e364985445bf19c44f22e
MD5 SHA1 SHA512

Submit Download

rg.stocks.positions.db-journal

Path /data/data/greenway_myanmar.org/databases/rg.stocks.positions.db-journal
Size 8KB
SHA256 bfc75e64415f39f9ca2bca2fad19b42316682aab87796dbc2dff6b29fd2f6c23
MD5 df173d333faf2091d0ab39e25a661f49
SHA1 19acac2597f5402a8bc9cc7556195e8c17912371
SHA512 eddbb3e9d8d2788a5b763ee51187345b0b539f818740a351141b7625641ecb70e83106e74df3c7a6dbb2bb568dba3ef7b0df7d4234ef636d8f5f3fc0d6121a4c
SSDEEP 6:7+/l98n1Dfg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKw:7+tYqLiuWdwRmBEyPb3
MD5 SHA1 SHA512 SSDEEP

Submit Download

rg.stocks.positions.db-journal

Path /data/data/greenway_myanmar.org/databases/rg.stocks.positions.db-journal
Size 8KB
SHA256 31e5af93738e1a6a350c10cd72171927ee65401b4b4dd6ac00aeccb9d979ea00
MD5 8ee339c8cf0c4d33e25468008fc9d9b3
SHA1 658dd4263c21cf23b4c36f80abf656b443a2647d
SHA512 e24b7ee5846889abf1e26677d6796843609316b71eaac6cf095b4559bfa900b8ce674b94bafafa8b08ab483c0ba54c23b98f215999e9251947ed24b697eba2e6
SSDEEP 6:7+/l9VPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKO/m:7+tfqLJdTRmBEyPbhm
MD5 SHA1 SHA512 SSDEEP

Submit Download

gaClientId

Path /data/data/greenway_myanmar.org/files/gaClientId
Size 36B
SHA256 46971890618d2231ef4624925e8c02e6ddce773954380fe6a770ffe451712177
MD5 b865f0fe0fcba9594dce4679b38aed1f
SHA1 5ec78571bcfd3e04ebbcf3f50d527ff76fcf39bd
SHA512 0b33f70515090ea9e29d555bfa43c779144e1d8166ff3be091bdcb6e591621034d146fe90808839abf536d2ac82799bcc5a99c0e09e17db0907e5aed45c09f2d
MD5 SHA1 SHA512

Submit Download

uKVoCGKFu

Path /data/data/greenway_myanmar.org/files/uKVoCGKFu
Size 354KB
SHA256 413c7e4847a159701fb1c03e4718cc7633e606041d6d901046bb08e76199b1c2
MD5 8ee1e715b6b2757be250911db3721c1f
SHA1 69c8458dd02820be4ee04e0647e82728ae458ef2
SHA512 6bd940da64b0d34563ac456bd374d1fbaee059b91217de28dc4185116a505888d5cc132a71e8b4c42f4a7266ef099555937c6442cbd9a58308caf25c2c30a79f
SSDEEP 6144:6Kut4jmdTcEgQT9FUWT+OyN3WYKRnTPObNon0IHQBxRQo0woK0HG0keZtUMj27EL:wwmoHEUu4avw1kiSoYQBEdo/+
MD5 SHA1 SHA512 SSDEEP

Submit Download

uKVoCGKFu

Path /data/data/greenway_myanmar.org/files/uKVoCGKFu
Size 631KB
SHA256 803bd0b3847baf5cebdc00a8a49a6bca22c72469c3aefdcf3c25315ef88a9f78
MD5 3e2c71529b63308b1bb39d36d3ead38c
SHA1 335ab4d6504e54a49f839aa9696cb82933b152e2
SHA512 a9b7de9b7fe5c23e14bf273f2d322e448c494b4a73e430ee3f667c744b40f1ba1a6b604898f107b91290fd56d07781530f36a34e49231459fa213e4de890019f
SSDEEP 6144:VC1v4YmdTcEgXTWFUWpyW+N3WYKRnWPpbNonbeMCvxweY1VS5CUeP55n2groI0Vu:9M5gjn2gEP1BDCMkUzH0jWa648SZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads