7164b77bb97e96b5900dc8468c70dedd5e3ce4957f9e2356cb4e58461f005808

Analysis

max time kernel
13s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
27-05-2024 18:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7a1fd6a1963e284dfe2a5ac72c20f3da_JaffaCakes118.apk
Size

827KB
MD5

7a1fd6a1963e284dfe2a5ac72c20f3da
SHA1

8efdfd37fadfda4a840ea0f3068fbcb8a844b672
SHA256

7164b77bb97e96b5900dc8468c70dedd5e3ce4957f9e2356cb4e58461f005808
SHA512

a580a6db0c1ae1d2b043ed68fe4bea059d4163a15b03518e592070628e1510587383f3b7fcef10e0e607699a0836afa85369d20722207d9aa8c4b2428c83f5a2
SSDEEP

24576:6kQlRHrE4n4mJlzG7nRHe/E0W5rD2hWbzC2:BQHQiTl4HesT5X2haO2

Score

8^/10

discovery evasion impact privilege_escalation stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs
stealth trojan evasion

Suppress Application Icon
T1628.001

Processes:

com.android.services

pid process

4680 com.android.services
Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Tries to add a device administrator. 2 TTPs 1 IoCs
privilege_escalation impact

Device Administrator Permissions
T1626.001

Account Access Removal
T1640

Processes:

com.android.services

description ioc process

Intent action android.app.action.ADD_DEVICE_ADMIN com.android.services
Acquires the wake lock 1 IoCs

Processes:

com.android.services

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.android.services
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

pid	process
4680	com.android.services

description	ioc	process
Intent action	android.app.action.ADD_DEVICE_ADMIN	com.android.services

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.android.services

com.android.services
1⤵
- Removes its main activity from the application launcher
- Tries to add a device administrator.
- Acquires the wake lock
PID:4680

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

T1626

Device Administrator Permissions

T1626.001

Defense Evasion

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

Credential Access

Discovery

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Account Access Removal

T1640

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.android.services/databases/bot_starsds

Filesize
16KB

MD5
cfb9b8a418d864ee2f800a3e9cd85782

SHA1
606c812b70e63913254a090980ce30afbf1b3547

SHA256
66dd11697c42c503811555d22d2a2d648dadff0cba82fa4fa650140c51772253

SHA512
f8efc609df5789390d1842c58cb4041bf75968449007ab36f26ae8f6f32abab7cd80e4d9707253e1f403cb39486c1a1ffddadbf71405c66a69d4a28ad7ce8ade

Download Submit
/data/user/0/com.android.services/databases/bot_starsds

Filesize
16KB

MD5
0ad0e611fa9ed19e55b5c6ab0dcfcbfc

SHA1
8565c819f4600214338c1f9fe0c558317bebcf37

SHA256
69b286402187b7198010ce8981d91ca389ecca121b6b18e4a6b0401f76aa7305

SHA512
212cfdec10228936c8d702cad28a6ed64967f123fcfdeda562477e7209a2bc7c00879fef637fd4b5fd35a4c132c32968e6d50758fa2c15751f13f491b4d6e2b0

Download Submit
/data/user/0/com.android.services/databases/bot_starsds-journal

Filesize
512B

MD5
211f98569b131b102a1a7f246d6e21cc

SHA1
5078b642cc54245d49e6ac105923a64de69bd6df

SHA256
2e13c1fd887d2a452007cfbacfccbc210557508b6c3ff3ff573144c11c5b220a

SHA512
2fea964beaabb58cf5b140ddf4df803588c4900aa58f9dcd672b3f3018dcfb073bd6e3855f408dbfbd189a2a456229866d24926cd87b18e3788487a5ae7b8034

Download Submit
/data/user/0/com.android.services/databases/bot_starsds-journal

Filesize
8KB

MD5
ce0be8a9c9aba20dcbfa7af3daaf8b82

SHA1
7604ae6f9de34100b983dfd6003bbaa5bc9ebd80

SHA256
1b11f81609f3fb5ef4516da7bf4cd731936e16638e6b46b8135a5f4418ae30b1

SHA512
591479fc844867d3b722b5adab4ccc46bec32f35dd326511951e1b89e27cc059736e4731701a0373136406e3979e8376793929afb335ccfbae4ca923f1fbfb7a

Download Submit
/data/user/0/com.android.services/databases/bot_starsds-journal

Filesize
8KB

MD5
e1848ea45dc17b9c4d43d975d6dea2eb

SHA1
80b78546089ab9514c5bfc333dd32a4df7e5b10a

SHA256
17a7fee28c235fc170e198d2578b468ec2b73e3ffa85e502b656b46cfe2be326

SHA512
27240350f3c70919d6fc98cfe4f3f7bd23d4415a295b12985649c3eaa90d45dcea5b78b63eeb1199e7be3d81fa25fa5f52d4e61e2e99409ea3fc824598005df2

Download Submit
/data/user/0/com.android.services/databases/bot_starsds-journal

Filesize
8KB

MD5
ab48ce037bc90f1d6ace45baec0f9c70

SHA1
b413a611561e68d17fb7ae4feffa069a0341ea39

SHA256
cbe9408a5a1b72ee56736191261816ca14a7adcb522800a6dd412e27f69022cb

SHA512
a6461e557b17bbc1073dc1f5f7e7c4f57222744cc629fcc290cf7ac730ed5984ed4bec766b86837ac5fc268d21f98b383b03a6bb14af19e4745d88ab0a94457e

Download Submit