b6d9c4c42b04bb365ba4247ce223ec551c608fe7997215c702ad4d2cf56fe565

Analysis

max time kernel
63s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240611.1-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
submitted
11/06/2024, 21:53

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9fa750cd4ba71b5713883eb5031f1b0e_JaffaCakes118.apk
Size

8.6MB
MD5

9fa750cd4ba71b5713883eb5031f1b0e
SHA1

60053d493feb0b2ae17b19fae112496dedb4165b
SHA256

b6d9c4c42b04bb365ba4247ce223ec551c608fe7997215c702ad4d2cf56fe565
SHA512

786555f7f804ee3394ecad4a7cb86198e9ac38cc7d55b85d01611d7f511041f701687e1ebc6eb15a7570633de53fff49d2b6ba95b4594dd4bb8420f70ce5f95d
SSDEEP

196608:g9BSjcO+XESTp+UIDGb6u0t3/Cl/hitZaDoVj1EcXk3:KM7++UI+6GaHEcU3

Score

6^/10

discovery persistence

Malware Config

Signatures

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs

flow	ioc
6	alog.umeng.com

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	smskb.com

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	smskb.com

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	smskb.com

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	smskb.com

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	smskb.com

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	smskb.com

smskb.com
1⤵
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4276

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/smskb.com/files/.um/um_cache_1718142908475.env

Filesize
584B

MD5
2b6c7456ff28171906d41cb3ca6ab2aa

SHA1
07ec89f8b574c0e16635ef0fe11590f330d811c0

SHA256
b18da79293c5d38e6dd8bde0988bd799daad9da6b8d95a9175d4b662694e6ecb

SHA512
be9cc3223c7ec6ef484b6207e12e3b22ff5edaa9810a000613344fd735bd0a580345dc2b3a1ce36db0c89585305b9d9d361f9f0df6f383227fb1b2f9be6a9368

Download Submit
/data/data/smskb.com/files/umeng_it.cache

Filesize
310B

MD5
10f2ec41701965b8424f2a962342231d

SHA1
75f4afbd78ec1a9a98ead60d46020b9c65b935e7

SHA256
f0c9d54fdaaa1eda5c4c0d29168da059162f265a2d1330171ac09a98b2947e4c

SHA512
0422594558077044ac8a1e507541c0a9e88ad5e887d21ae7034e8979bbc54de58a4bd9a3a8115f04b190817ab5a602b675d5ffaa4bce513b2b3c37185ba44a74

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads