8ec579e16974c38590022b06f8dad4d38842475a4e506d2f52f917766f97b450

Analysis

max time kernel
12s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
28-05-2024 17:03

Target

7db63ae64a17fc79441f09b9b706fd94_JaffaCakes118.apk
Size

1.3MB
MD5

7db63ae64a17fc79441f09b9b706fd94
SHA1

cb4813b79d9da3fa91ac02d45a4a57f71c688352
SHA256

8ec579e16974c38590022b06f8dad4d38842475a4e506d2f52f917766f97b450
SHA512

23a105981df60e51fa279747e2f1411d38e6834da22f8a7ca6416d52bf48f0b87d70876e644f90ef69fd10795be40411f89d0cef196faa54cfad3c372efb0c81
SSDEEP

24576:NvjQNOkaXfWxDsJFwI9k0ibZF+wMjQzd7N1jTBHq8W+JNchHoklgJZ32pW0Ley9J:NUxCfmgLwIBiFFZ7N1pHtW+JNchHoklH

Score

8^/10

Removes its main activity from the application launcher 1 TTPs 1 IoCs
stealth trojan evasion

Suppress Application Icon
T1628.001

Processes:

org.slempo.service

pid process

4644 org.slempo.service
Acquires the wake lock 1 IoCs

Processes:

org.slempo.service

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock org.slempo.service

pid	process
4644	org.slempo.service

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	org.slempo.service

org.slempo.service
1⤵
- Removes its main activity from the application launcher
- Acquires the wake lock
PID:4644

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Suppress Application Icon

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact