6ad290c1d3fbee9644f6e8ff2c220d39f536e506b94192d8ae7e935ce84cbe5a

Analysis

max time kernel
13s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
28/05/2024, 00:38

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7b1be90fcdd7db6356bc6325db77ec4b_JaffaCakes118.apk
Size

13.8MB
MD5

7b1be90fcdd7db6356bc6325db77ec4b
SHA1

7ab174c36d4329dd2dc7ea1b77419b8bcbeeb534
SHA256

6ad290c1d3fbee9644f6e8ff2c220d39f536e506b94192d8ae7e935ce84cbe5a
SHA512

ff5bbd7b505b9f44b88dea2f4372ebf7001615d70b43090fad75f3742dc68caa454f91426b17aa5efd3bf5d5a92a5edd356e4e0ad7822955f04e4e86dbf0d028
SSDEEP

393216:723qjwXrgtICNeQd1rdNYmKg6OGoUNQvFfb2kf/Lpg01F68sR:7Qgyr4ICNx0VNmRf1gc6/

Score

7^/10

evasion impact

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.jx.hz.app/.jiagu/classes.dex	4622	com.jx.hz.app

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.jx.hz.app

com.jx.hz.app
1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:4622

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact