Analysis

  • max time kernel
    179s
  • max time network
    134s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240603-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240603-enlocale:en-usos:android-11-x64system
  • submitted
    05-06-2024 17:06

General

  • Target

    98b6ebbf3c5a77ac4ec01134f7f28d57_JaffaCakes118.apk

  • Size

    209KB

  • MD5

    98b6ebbf3c5a77ac4ec01134f7f28d57

  • SHA1

    ba4f2c1ebdc64ae238f04f6ceac67bdf2f5e6dd2

  • SHA256

    b152a6b442b4551b85a132eefe204c323d9e0d1a55808b4cf3f1bd757948e744

  • SHA512

    a63b8f68859d4e7dd8b9847afe5757f6e676d72f9cc63ef109e754453619ce2d1850b2cdfe85872009bfa15dcac9347ca477f828e9a948fbfad1e6b61a9a5c64

  • SSDEEP

    6144:8F7tuHt51hKzjc/vBu6BLxLgufI/6NEJMz2Cdt:guZhKOukLBguf0ZJMjt

Malware Config

Signatures

  • Removes its main activity from the application launcher 1 TTPs 1 IoCs
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Queries information about active data network 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.beacon.drill
    1⤵
    • Removes its main activity from the application launcher
    • Makes use of the framework's foreground persistence service
    • Queries information about active data network
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4615

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.beacon.drill/files/aa8fd1cf-a6b2-4c5d-9885-da4f1f19e7cb.dat
    Filesize

    404B

    MD5

    dba2a76fd18d3333da19585ae606f0ad

    SHA1

    d22d9a952fffe515232b31739b7da05ddc4aa17d

    SHA256

    eefe797bd914e9b51c958ef21076e106079e819b44c4cd79608900c368e88c1a

    SHA512

    d1c34d3803061d8d49c7f867ab0cb2a3c7de1c0fcfe5e5dbc2f5ca923bdaf6b81ca9a18d317d36674070f0a21e72389097c4f389a7462033685fcd0a098e0ce1