a6615a718675158da1cc1943cb3604b3e20c3d7f15d6989ec83364f1d2c59d2f

Analysis

max time kernel
14s
max time network
131s
platform
android_x64
resource
android-x64-20240514-en
resource tags

androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
submitted
01/06/2024, 09:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
8a171a9769b90f50702fe1df66830a5e_JaffaCakes118.apk
Size 22.9MB
Sample240601-lsvvgsaa65
SHA256 a6615a718675158da1cc1943cb3604b3e20c3d7f15d6989ec83364f1d2c59d2f
MD5 8a171a9769b90f50702fe1df66830a5e
SHA1 b2cba33782139d7885dc3ae0d592290c4a1cba48
SHA512 a6872915138825842e8154a1855e9a8dc03c06eeb88d97ef41e6eda2c9e951b7810fdd3d8bb11bdff233804783ce8b001114deb345a6ae40089fcc27f48ee917
SSDEEP 393216:tYSgeJ/O9yaZaKkgelGfb6YSokixzr6lD4t/lgovN9B7SehsFTYwm7GiuBBvrOAM:tBgs/OUCeI69okszrus/N91SeMTYFEBI
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

banker discovery impact

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.huawei.hwcloudservice

com.huawei.hwcloudservice
1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:5103

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

hianalytics_cached_com.huawei.hwcloudservice

Path /data/data/com.huawei.hwcloudservice/files/hianalytics_cached_com.huawei.hwcloudservice
Size 138B
SHA256 b7f61b4a27f8bd0b29434d1ef6e480ec9b9f3d2a2ae6ed2cbcc4e524d9b2d54a
MD5 b5aa1232d2ca63ab187e59651f7e48bd
SHA1 50aea934f355d81297b16e5fbf3dcd6b04ad226a
SHA512 9864d34a98f9ef0214d79d7c8bb4f8cdb54db3186ea857a3c94c0038c75660599a73cbbb8b49951660301fe51cf177ba4fa8664312aa8fbbfa48b274bb8e4ed4
MD5 SHA1 SHA512

Submit Download