859a1d9f16a77b1383c58fe83cf5000e1a49d6672f04be3b24e05911b0f83f4b

Analysis

max time kernel
179s
max time network
148s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
31/05/2024, 22:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

888c8fc0a3b12eddc26c4759f8ca16b3_JaffaCakes118.apk
Size

24.6MB
MD5

888c8fc0a3b12eddc26c4759f8ca16b3
SHA1

da3632321c452b2fd0bce271499e6353c2225fb5
SHA256

859a1d9f16a77b1383c58fe83cf5000e1a49d6672f04be3b24e05911b0f83f4b
SHA512

53164d99eaecefbcdf293222cd625a92d720fb5e1c74a93ee45df62ff1a59a33056211eb7afc77d616f7ce62fe61c84536cae6274b2995c60e9243051bc99aab
SSDEEP

393216:EWMnfe6FClsgNJJ4bYBvbU6Loc3njj0PzZK5yuu51q25OxzUw1ODtqylf6X5PtnV:EW4G6MBLUG/3njuaM1P5OxIw1OUyCPtV

Score

7^/10

discovery evasion impact

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.rhxt.gfdx.egame/files/egame_temp.jar	4228	com.rhxt.gfdx.egame

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.rhxt.gfdx.egame

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.rhxt.gfdx.egame

com.rhxt.gfdx.egame
1⤵
- Loads dropped Dex/Jar
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4228

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact