e535c6d3699194078b0ff09d4a86c508945ee63fe94d10ce35c5bc3cbae87390

Analysis

max time kernel
15s
max time network
167s
platform
android_x64
resource
android-x64-20240514-en
resource tags

androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
submitted
02-06-2024 21:42

Target

8f86d885c2ac052d177603fe0a270992_JaffaCakes118.apk
Size

241KB
MD5

8f86d885c2ac052d177603fe0a270992
SHA1

77034e69f9e81a1d1b9d6d6d74ad5d8b3c7897fe
SHA256

e535c6d3699194078b0ff09d4a86c508945ee63fe94d10ce35c5bc3cbae87390
SHA512

fc43351bc10c9d2ada1e32aa8835746e680b1fa0ac719de73a6daffd2ce39606fd461fdcab939a70998e44160a98f9a4bb65d4974119068a6d6ca9c73eaa2f47
SSDEEP

6144:st8xUVlwlVXS/moyE65Tiuqd+Pc5ymctK6Focz82874YuY45:sJWVXSOTEKTidAPc5fcsM896Yc

Score

8^/10

Removes its main activity from the application launcher 1 TTPs 1 IoCs
stealth trojan evasion

T1628.001

Processes:

com.qihoo.antivirus

pid process

5109 com.qihoo.antivirus
Reads the contacts stored on the device. 1 TTPs 1 IoCs
collection

T1636.003

Processes:

com.qihoo.antivirus

description ioc process

URI accessed for read content://com.android.contacts/contacts com.qihoo.antivirus
Reads the content of SMS inbox messages. 1 TTPs 1 IoCs
collection

T1636.004

Processes:

com.qihoo.antivirus

description ioc process

URI accessed for read content://sms/inbox com.qihoo.antivirus
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

T1422

pid	process
5109	com.qihoo.antivirus

description	ioc	process
URI accessed for read	content://com.android.contacts/contacts	com.qihoo.antivirus

description	ioc	process
URI accessed for read	content://sms/inbox	com.qihoo.antivirus