e947bdc595516583d7db833869ea35b28d70a6affc61cf43611a7f0d9e12befb

Analysis

max time kernel
47s
max time network
168s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
27/05/2024, 20:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7a66695f4e88a3a31820f86050d82f00_JaffaCakes118.apk
Size

30.4MB
MD5

7a66695f4e88a3a31820f86050d82f00
SHA1

e39ab5c05849f404dffc1597711cbf70b35b8add
SHA256

e947bdc595516583d7db833869ea35b28d70a6affc61cf43611a7f0d9e12befb
SHA512

9df62e2c479eac66e1f1110ee1a721e5ba130d90cf5f749325fff181954fd3f6cab0ef3e600a6a306d444e948a9353f3e14c6dced819b228a892311ebf918726
SSDEEP

786432:2aboIFt9pvB4CtWXdQxbeGsFAjS8MYqKgVX+vdvEoKLNa:vEOh7tRx5jSvYCOdEo5

Score

7^/10

discovery evasion

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	net.kairosoft.android.ninja_en

net.kairosoft.android.ninja_en
1⤵
- Checks CPU information
PID:4515

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/net.kairosoft.android.ninja_en/rs/0000

Filesize
300B

MD5
8e228b338ada2053625eeb5b033c1e82

SHA1
7d10036480610b5a7c55f1070b4c23cbcd28198d

SHA256
6028cdae19a824dd0ab682a9e9b47865e9f89910db786d4fc15fa2a8177d22ce

SHA512
129fd4dd6988266caac469db8e35104f164fa0e356fe9d61724944b86256f8a259c58c35d9631f899d01424cbb5a9ab2b42335c728d3668b86614b94d02e3ac5

Download Submit