a6615a718675158da1cc1943cb3604b3e20c3d7f15d6989ec83364f1d2c59d2f

Analysis

max time kernel
16s
max time network
154s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
01/06/2024, 09:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
8a171a9769b90f50702fe1df66830a5e_JaffaCakes118.apk
Size 22.9MB
Sample240601-lsvvgsaa65
SHA256 a6615a718675158da1cc1943cb3604b3e20c3d7f15d6989ec83364f1d2c59d2f
MD5 8a171a9769b90f50702fe1df66830a5e
SHA1 b2cba33782139d7885dc3ae0d592290c4a1cba48
SHA512 a6872915138825842e8154a1855e9a8dc03c06eeb88d97ef41e6eda2c9e951b7810fdd3d8bb11bdff233804783ce8b001114deb345a6ae40089fcc27f48ee917
SSDEEP 393216:tYSgeJ/O9yaZaKkgelGfb6YSokixzr6lD4t/lgovN9B7SehsFTYwm7GiuBBvrOAM:tBgs/OUCeI69okszrus/N91SeMTYFEBI
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

banker discovery impact

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.huawei.hwcloudservice

com.huawei.hwcloudservice
1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:4280
- /system/bin/sh -c rm -r /data/hwcloudservice
  2⤵
  PID:4369
- rm -r /data/hwcloudservice
  2⤵
  PID:4369

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

hianalytics_cached_com.huawei.hwcloudservice

Path /data/data/com.huawei.hwcloudservice/files/hianalytics_cached_com.huawei.hwcloudservice
Size 138B
SHA256 bcdac4f7888484bf495149d84d49717cb01ff40ca8987637908656595604f220
MD5 5cb431a5925b5fbd0dafa8601d318d29
SHA1 6d27b81582c96bf36a7c7ca12db595cbee52a9ee
SHA512 43396fb58d78c5fb0f7b2b75c65d7edcd446ee7b79cbba53e2b99a06ceee31e672c7dc8f2627d38aaf6f71d33b2b250af9d79473c426a024aef8407613deb756
MD5 SHA1 SHA512

Submit Download