4a6f124bccd347b6260f520e509de89b85bfdc09ac7634f36b3e5a709e65e1d0

Analysis

max time kernel
178s
max time network
148s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
03/06/2024, 12:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
91dea78c0874e427cb4899f0eae12d91_JaffaCakes118.apk
Size 573KB
Sample240603-p7mdfagf55
SHA256 4a6f124bccd347b6260f520e509de89b85bfdc09ac7634f36b3e5a709e65e1d0
MD5 91dea78c0874e427cb4899f0eae12d91
SHA1 df550a462317dacb752bc718e117252fcb1f2cc7
SHA512 3e320dabc80b3231630337edb3c416e5512ae35175af3f3c289f0da18b4e94f3c2b8fe2ee1d9a045a1c1b85751a67ce1e25bb2df281d480776a51f2e6abb7649
SSDEEP 12288:hVnjg1PONxA1VFxcjFTEHAQGHeJsHGTr+R3ZZdEiJS9b:jjg1PONxA1V/cjFTEH5J0GTrYdOb
MD5 SHA1 SHA512 SSDEEP

Score

4^/10

impact

Malware Config

Signatures

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	ccom.boris.webster

ccom.boris.webster
1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:4641

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

ccom.boris.webster.dev_id.txt

Path /storage/emulated/0/ccom.boris.webster.dev_id.txt
Size 56B
SHA256 5b1eef5257d1d3fefd89bb6485f859f3779a77052fe3f399f29607e8bfb6d0ef
MD5 9a4b31ec5885a34190886e996b24be8c
SHA1 372d50ea0ffcf51c37951cc8f861001d3135bdc3
SHA512 b467fb07071bc720566d6d4ea13ba899ca08887ed21723467f5d13350cb95a53a9750665d9db2028c31970aa0347583e319d19d6019c82b428e6d7076cf7040f
MD5 SHA1 SHA512

Submit Download