0703556253925e5cf699523d4cb5c9f1586f15f078e7c2271b9ecab41a4ec418

Analysis

max time kernel
15s
max time network
153s
platform
android_x64
resource
android-x64-20240603-en
resource tags

androidarch:x64arch:x86image:android-x64-20240603-enlocale:en-usos:android-10-x64system
submitted
11/06/2024, 03:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9cebe08988bd976bbc4bd5e2dd2881ec_JaffaCakes118.apk
Size 6.7MB
Sample240611-ejmdestcme
SHA256 0703556253925e5cf699523d4cb5c9f1586f15f078e7c2271b9ecab41a4ec418
MD5 9cebe08988bd976bbc4bd5e2dd2881ec
SHA1 98f5cb65ec6ebaf0bab05f10c8060fd7b4f969aa
SHA512 15b374f89311ab204f0f1db53d67e7b3c93b37fed7856e20e793b03b82dca234c32f2c6dcc959f2b559e3c3092cc23bbf71b384a609b9ea6e9e44d94a2b9f6e6
SSDEEP 98304:KfWV6mwtiDeC/K6foTRO7Ouaa0SfkQyECKeT97mQ:KfW85iDeguRQOE0XsD8mQ
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

evasion stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs

stealth trojan evasion

Suppress Application Icon

T1628.001

pid	Process
5027	com.zoka.android.posaobl

com.zoka.android.posaobl
1⤵
- Removes its main activity from the application launcher
PID:5027

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

ZVxwSBkPs

Path /data/data/com.zoka.android.posaobl/files/ZVxwSBkPs
Size 358KB
SHA256 5633795d78d0e24a5e8fc1e87afeb7a0d5d1c3146e38932c0a3091f6dd6632a7
MD5 a1182e743de579df31f5bbca8d376977
SHA1 07618a06f77ea73dcfdea107ff22b0c2d8a9abb0
SHA512 aa2a730ecfd4deb12e232c291b44f97c6f5c70a52da79885b5cb6adcbfc7ab476c9f897b757b9b44b03ffec11936ff120222bd4ddbe9f11d07c207f7f389c8c7
SSDEEP 6144:C1Kut4jmdTcEgQT9FUWT+OyN3WYKRnTPObNonclRp1YuwVKUHGB0diQDAGNEL51o:CaYQeDcXaxkJmDNOB0mB/V
MD5 SHA1 SHA512 SSDEEP

Submit Download