ce5b4a1ecfc0e75e825082f9b41de8d8cebbef9199a3c539866d7afff130ca0d

Analysis

max time kernel
2s
max time network
174s
platform
android_x64
resource
android-x64-arm64-20240611-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611-enlocale:en-usos:android-11-x64system
submitted
11/06/2024, 15:54

Target
9eb7b3ebe516adca3d4c561701bef304_JaffaCakes118.apk
Size 8.0MB
Sample240611-tchtzssgpp
SHA256 ce5b4a1ecfc0e75e825082f9b41de8d8cebbef9199a3c539866d7afff130ca0d
MD5 9eb7b3ebe516adca3d4c561701bef304
SHA1 93cf074bf0bdefc099e0873d932e1b023e576113
SHA512 fb05759354e842de49044a1066bee74365829a92167ac0a5f9b40fabed0efd29b3ea81d0ad1eb95136ecbd4d764729d8bd10ae7be2082ef80b96cd2ff69b6c0e
SSDEEP 98304:X+dsuv0POhDmn+gZ0aGt3sbSJy8/LosKzYnSlnyw3icoSLbOdtrzAW4vUYK+6Vyg:X+su8q2tbSp3S+dh6BmOxoH55E1E
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

Process Discovery

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.vjiqun.fcw

com.vjiqun.fcw
1⤵
- Queries information about running processes on the device
PID:4586

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact