6e7f5dbeb3c202ef4de8a05b41f28a35f9b66ab12ca4457afbaa4739b9705620

Analysis

max time kernel
52s
max time network
159s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
29/05/2024, 15:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
812c8f982179611a6a998a0abc2d5c78_JaffaCakes118.apk
Size 15.0MB
Sample240529-snq43aba42
SHA256 6e7f5dbeb3c202ef4de8a05b41f28a35f9b66ab12ca4457afbaa4739b9705620
MD5 812c8f982179611a6a998a0abc2d5c78
SHA1 38e0bca0bddfa1b3996d15a71e64f4741acd763a
SHA512 8bcefc21c1e9d2fce6f8d585c01799fce68a32e97c336c51dfee6608c0ad00b3ffe9aa8cba0f28a46cdcc5647317b9dd0e6d426a2dd91cb210345f04bc945cf7
SSDEEP 196608:WRK9gOOVVdTC7b0Xj7uC6bNTExc+rJ642byOHctEr8r6e0+aOt6mX+QSqwKXNGcN:WUVOjRCYj7WTE5rgnpHctu+oqNhZGXqL
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

banker collection credential_access discovery evasion impact

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.vince.sportscalc

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.vince.sportscalc

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.vince.sportscalc/[email protected]	4593	com.vince.sportscalc

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.vince.sportscalc

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.vince.sportscalc

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.vince.sportscalc

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.vince.sportscalc

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.vince.sportscalc

com.vince.sportscalc
1⤵
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4593

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

test_app

Path /data/data/com.vince.sportscalc/shared_prefs_ext/test_app
Size 29B
SHA256 37faa3e151bb3816b19e1c2d486d15458757e8eb8fbc4e8b210efbfad9b5e447
MD5 61256c9aba5d236c3d1629a06ebc1b73
SHA1 01f6094a40c8c42d951e779a2aaa4f20b39bc691
SHA512 b06fcda5d564fc89b21ae45b4561d6720a5f31d4597b738313e17cb970874e4ff649e4ae1210013218c812da68f8c041721cee5f56b36f12381f0f93816fd213
MD5 SHA1 SHA512

Submit Download

A3AEECD8.dex

Path /data/user/0/com.vince.sportscalc/.00000000000/A3AEECD8.dex
Size 63KB
SHA256 f0ead1ad60e0cc310c1a40685c28fc7a69aa346604552816c51dd3c1718a1e76
MD5 ed73a80eb949bacc52428b8d5a087fa5
SHA1 07e973549a2cee61ffeeb6439abc419cd8a489a9
SHA512 4bc26c18ca3a2edfe38ca1e14ad1e1415268b4a69cdff3c0f8e2b8fa910c67c2e4bc4f32c21274e586e8e139122ea3dbde7ec507c4722b4a9a778ee2598090b8
SSDEEP 768:2UJAegWguWxVIwIkH9nn3ETgu3kltfit3EnJF/+A2BCOjVDDHcLoqrTARuIZkMRy:geuNS+3EU8klt03EndkRDDHEMTQi1Gt
MD5 SHA1 SHA512 SSDEEP

Submit Download

A3AEECD8.dex

Path /data/user/0/com.vince.sportscalc/.00000000000/A3AEECD8.dex
Size 63KB
SHA256 3aa6caecfcd101531539147e01382bc530b4fdc61e98937d63cc4648793c6a45
MD5 5061e4948844f7d366972ac8005e9f13
SHA1 a2b79a1c79afb095ddebf0f16a1f9db64482bcaf
SHA512 223d18ce248912df18cdea3c8e864ea5e6ec058ca42cc5fde738188c54abcd260d7f24ac53d4987d3e32f4ae3e1e40e01354054d035bb100eef51b2d695f5299
SSDEEP 768:X3L4QVlsw4IC4KXosXYm7QjtLtDcHIQncDxfuAQuJ+jVuphag/yJ6Y3cIsPLb5zs:X77VX4gyYvJKbcDAFomW5z6GbS
MD5 SHA1 SHA512 SSDEEP

Submit Download

jsb.version

Path /data/user/0/com.vince.sportscalc/cache/jsb.version
Size 1B
SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
MD5 c4ca4238a0b923820dcc509a6f75849b
SHA1 356a192b7913b04c54574d18c28d46e6395428ab
SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a
MD5 SHA1 SHA512

Submit Download

libweexjsb.so

Path /data/user/0/com.vince.sportscalc/cache/libweexjsb.so
Size 6KB
SHA256 075f5431397263562da0a61835f543ff13c708f4b5c4a4588a93f5ef08254c5a
MD5 7daa126a59a44091b737186c77697355
SHA1 3d0edde6aad106a18b3c5e139bc5b17872544920
SHA512 1dff58d4598278d53a4f571152142de312c2b1494b0c9f6a908e281845a041bfd4c864726fec0ece1c6d3994f13622ac7310aef479bca71e42a071f8d2307cfe
SSDEEP 96:hcte7X6Avunj6lSjbJcFN24ob+w+VfN24C:hck7X6AvunmEbJA9U
MD5 SHA1 SHA512 SSDEEP

Submit Download

eje3cnc

Path /data/user/0/com.vince.sportscalc/files/cnc3ejE6/eje3cnc
Size 39B
SHA256 5ba33c69421ad27727832442cb5939d5bc853acecd0d8162d7c10a6b96757dcf
MD5 7769d4507985f59116153463f09235a2
SHA1 b081e84d14300ac7a7947aade9c025fa83bc17fb
SHA512 ce5bb431a31eaba24c0cf467bedb1abee2205b74c4533067058b09ce7e8f9480b8baa01866e3dc89d1800d07da6007f36c1b4fea811e3da164b187903480d29f
MD5 SHA1 SHA512

Submit Download

dso_deps

Path /data/user/0/com.vince.sportscalc/lib-main/dso_deps
Size 404B
SHA256 bad392c5d198250f566b294628cd05c8755c2619f9bb6474f41a6d4c94d5d04a
MD5 d9ed27dfc35611e9a4c31f0f1ebdc1a3
SHA1 79bb84497402470da637987733a6a77d0115f301
SHA512 6d37deccff9a75f88502bde0a5711aff0f541534e173ab420df579a2cef4c9c59892d28b20254e3cd66b51fd8197cb48175650ceefcf7bc2037bc95da6918e6e
MD5 SHA1 SHA512

Submit Download

dso_manifest

Path /data/user/0/com.vince.sportscalc/lib-main/dso_manifest
Size 5B
SHA256 957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027
MD5 c06857e9ea338f3f3a24bb78f8fbdf6f
SHA1 c5a0a2529d2deb60fec041b4fbd722a2ebe31702
SHA512 29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1
MD5 SHA1 SHA512

Submit Download

dso_state

Path /data/user/0/com.vince.sportscalc/lib-main/dso_state
Size 1B
SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
MD5 93b885adfe0da089cdf634904fd59f71
SHA1 5ba93c9db0cff93f52b521d7420e43f6eda2784f
SHA512 b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee
MD5 SHA1 SHA512

Submit Download

dso_state

Path /data/user/0/com.vince.sportscalc/lib-main/dso_state
Size 1B
SHA256 4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
MD5 55a54008ad1ba589aa210d2629c1df41
SHA1 bf8b4530d8d246dd74ac53a13471bba17941dff7
SHA512 7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339
MD5 SHA1 SHA512

Submit Download

.imei.txt

Path /storage/emulated/0/.imei.txt
Size 32B
SHA256 b31bd18c4db98757dff0110b1035f55149cedf100b9eb225e374ce276c73121b
MD5 5ecf9382efc415f90091bbf66c5bf4cb
SHA1 23d58a1f178c153c24d3db085f9978b050a13f40
SHA512 2405c33b0468db6423b7213e71935a3a15a509c87467e2e6a3ae13e79e087cb8e11cac69970dd61528259d273f67130ba2672713c3c0cb59fe9e7e4449671c90
MD5 SHA1 SHA512

Submit Download

1716995818253 (deleted)

Path /storage/emulated/0/Android/data/com.vince.sportscalc/apps/__UNI__02337F9/temp/1716995818253 (deleted)
Size 249KB
SHA256 283c8b4129e6c7db87dd1d2d762b79a4e373025c17d74035e835fd91484deab4
MD5 425f9baab9a11338a36dd8d0e5832a02
SHA1 b6fa347b891fa06d821265a29e2ba900df79165c
SHA512 a202410024a4ea5f9acac39fb378263f3cc7a60b431de7721339c77c1d2d432006419818633a0323ca372fa73f0637488f9d701ea0e11254ebe84690b8c4f285
SSDEEP 6144:kDDxhjpiTAc66QGE0UXeX0HJEy/M6BvDcRHpX4eS:kxHJEy/MLRHpXPS
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads