497b8c8e05e89e0bc538d395e2336627791b43a4c04c625072e17b47aa3dc37d

Analysis

max time kernel
152s
max time network
147s
platform
android_x64
resource
android-x64-20240603-en
resource tags

androidarch:x64arch:x86image:android-x64-20240603-enlocale:en-usos:android-10-x64system
submitted
03/06/2024, 16:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9276de9e07d8cf442b7d4d5ee5f4d3c1_JaffaCakes118.apk
Size 8.2MB
Sample240603-t3pp8adf94
SHA256 497b8c8e05e89e0bc538d395e2336627791b43a4c04c625072e17b47aa3dc37d
MD5 9276de9e07d8cf442b7d4d5ee5f4d3c1
SHA1 fe38fb6e27bf2e6b317e061b8acd84bdec95439d
SHA512 b027c307b2e7d9308ac10f81e014ef870f6d55dae58a89e86cd40bc4b562817ad26f5b167b920c80ebed294c05f83c7a6bd9cec6e500a97bd3e98dacf1d83ba4
SSDEEP 196608:JI0KWSMhDJxCbUPzp6beG9hvI1DNujhvI0BUXlVc2lA:JBKenJzpMeGvQ98tQ5XrcQA
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection discovery persistence

Malware Config

Signatures

Queries account information for other applications stored on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect account information stored on the device.

collection

Stored Application Data

T1409

description	ioc	Process
Framework service call	android.accounts.IAccountManager.getAccountsAsUser	com.hrbl.mobile.android.order

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.hrbl.mobile.android.order

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.hrbl.mobile.android.order

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.hrbl.mobile.android.order

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.hrbl.mobile.android.order

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.hrbl.mobile.android.order
1⤵
- Queries account information for other applications stored on the device
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
PID:4983

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1424

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Stored Application Data

T1409

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

cache_1717432557768

Path /data/data/com.hrbl.mobile.android.order/app_TLFCache/cache_1717432557768
Size 17KB
SHA256 31fccf3477464cf27618df82842e9144b59747a7ee13dff7fe57d82fba4a0720
MD5 ead32d8cc91ddd6fb8e2af3cd867d8a3
SHA1 8b682a2174abf7d4cfdef792a8a65e25337fd7a5
SHA512 550308e2449f9e9e180ce619435c298be1d6f7c9d5d64e9accdeeb7d636edaf73e72df71ba466b3d30d85b1774cc4e67794a7319c0d70fe792a55630d41674e5
SSDEEP 384:pi9q8pYtBMU8PxSMbI0zl+8pYtBMU8PxSMbI0ic4n:7lM006lM00K
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_analytics_v4.db

Path /data/data/com.hrbl.mobile.android.order/databases/google_analytics_v4.db
Size 28KB
SHA256 f8cad5a73cb912f4f6cb42599155af99d4496e2c6687fc9a378c1a20557c0190
MD5 ddaaca904fe987d8c3c98a11c83f331c
SHA1 1ffdea5e4f339b213bed6e9828ed259f9018aa16
SHA512 cbd41937b43d0fbf8466bd96c9f87d9cb6a36fb562d7c55eb8b3ac883fea01f1b8fabf3e1c2befc79e84537a87217ccf7a9e8f1cd7b795d775e5f44742c006e6
SSDEEP 24:TLmLVXixByqQWWEqrUhCafBGBGSiG8qSExAE:TKhX9hWfqrUhnBZSGqSHE
MD5 SHA1 SHA512 SSDEEP

Submit Download