a37bd29c9f8ebe0692079f9bce2a4e9086413ff4fc20097337c736551a4317b6

Analysis

max time kernel
4s
max time network
157s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
03/06/2024, 11:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
91a9951b8e4a65e8bd3a7ea4e6b03d57_JaffaCakes118.apk
Size 30.4MB
Sample240603-nwtspsdc8x
SHA256 a37bd29c9f8ebe0692079f9bce2a4e9086413ff4fc20097337c736551a4317b6
MD5 91a9951b8e4a65e8bd3a7ea4e6b03d57
SHA1 2667e99b7c507af9dffb855f84f854ff3d947036
SHA512 020e694afea6fda88f9838edb74adef24c89593e8aab5656bb573f012ca5e59d011b50c6482878c8c5e0915da62599dc67ea8c0f1a3377bb2b558df197c9933d
SSDEEP 786432:r5UR9m8+0xzuDx0lNUS8yyhtfKNH7Q+EjMrTyLeKNeCA4zJ9Ph0CJL:WR9/ZJlefKNII/yjEuntJL
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery evasion persistence

Malware Config

Signatures

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.fullfat.android.agentdash

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs

evasion

User Evasion

T1628.002

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	com.fullfat.android.agentdash

com.fullfat.android.agentdash
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Listens for changes in the sensor environment (might be used to detect emulation)
PID:4303

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

User Evasion

T1628.002

Credential Access

Discovery

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

.flurryagent.1d2d7e17

Path /data/data/com.fullfat.android.agentdash/files/.flurryagent.1d2d7e17
Size 58B
SHA256 2fce1f6789c96416dc77b36b7102992007da062e0ff6905769579222b14b44ee
MD5 9f6077b27bc83cd20406f9629c881b45
SHA1 f9964abee517f5700d512d0d3c90a87736ede995
SHA512 ea57878ae4795aa3e584bc5d4c4bc3e66191818b5c7af57406879be109c4b7624a5822b26aaa6d62e52e024c319a1467c87200603aaba85da5b009a599762b98
MD5 SHA1 SHA512

Submit Download