c159b693c3aaff8b4d1994c7418dfaaeb275dddfac6e95f45708d0805e7e041b

Analysis

max time kernel
4s
max time network
169s
platform
android_x64
resource
android-33-x64-arm64-20240603-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240603-enlocale:en-usos:android-13-x64system
submitted
04/06/2024, 00:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9326e8d500ad7873bb50e49604a01dc3_JaffaCakes118.apk
Size 26.3MB
Sample240604-ayn4cafa2y
SHA256 c159b693c3aaff8b4d1994c7418dfaaeb275dddfac6e95f45708d0805e7e041b
MD5 9326e8d500ad7873bb50e49604a01dc3
SHA1 1e7e5fee9bd5da46fbca52a15c5f77575304034b
SHA512 19f2ec2383b4f33d3e621335efe501af9475479096edb776836d02ffacb395ddd82a687f08a571b234b3dc3eecce7cf4c01a9181e21a133b3c6158c21609c851
SSDEEP 786432:uCG0EvPxVcm1vgVt8x/nJf10ozROTOzvbQ2+k:uiER0ghf1BwTOzEXk
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery impact

Malware Config

Signatures

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.lcworld.beibeiyou

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.lcworld.beibeiyou

com.lcworld.beibeiyou
1⤵
- Queries information about running processes on the device
- Uses Crypto APIs (Might try to encrypt user data)
PID:4236

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1424

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads