d25f101af2572f3b73cc4d114b314e9486b1a24e681f94b8bc7aa7e0e9226bc5

Analysis

max time kernel
2s
max time network
155s
platform
android_x64
resource
android-x64-20240611-en
resource tags

androidarch:x64arch:x86image:android-x64-20240611-enlocale:en-usos:android-10-x64system
submitted
11/06/2024, 16:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9ec0193fe7eadea9e9641ff86e4b9685_JaffaCakes118.apk
Size 1.7MB
Sample240611-tk4restaqq
SHA256 d25f101af2572f3b73cc4d114b314e9486b1a24e681f94b8bc7aa7e0e9226bc5
MD5 9ec0193fe7eadea9e9641ff86e4b9685
SHA1 ec2f327e001950eae6a8e1ebd9042f951a3b4175
SHA512 c8dc60269a5913815a6c291af620c558d503c9265eb02746d6907efe596dbfbfc1b4fe09688e0e2fb88e0928fc7ffbf0d0208b7499f6cdbe481a14f76abf0b82
SSDEEP 49152:3cM/epL/o6Ge43LyBl7p9RkBJ8b/e72Xx:3cM2N/o/e43WBld9RkBJ87u2h
MD5 SHA1 SHA512 SSDEEP

Score

4^/10

persistence

Malware Config

Signatures

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.photo.selfkeep

com.photo.selfkeep
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4970

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

crs0.ops

Path /data/data/com.photo.selfkeep/files/crs0.ops
Size 1KB
SHA256 8fa3fe9a17eea192a50d2d5492cf25ec0aee6b14fea9dfcb5a8fd80e29efecc7
MD5 fee98f08da33639003fe8f19bfe3d434
SHA1 9f776fc0c2e7a36e8a757759b1b2c93b59175c83
SHA512 cc90dd43f38a44a34e914617be4d5782baca58ceb5b8a7d8aeb5a9e34eb88cfb842e766e2ec7c02967d8551fb2fd5b9e6ed74c96b1d2f5bde079d853b9bbd133
MD5 SHA1 SHA512

Submit Download

libnative-lib.so

Path /data/data/com.photo.selfkeep/files/libnative-lib.so
Size 173KB
SHA256 c8feecd3e0ca59d2c52ca779e3f178d44df2f139f3862c60ea4dccf501ff150f
MD5 385ba6c6089f29ebaca120bd23068a18
SHA1 8cd09fc1347fcb60f92f2381dfd02259d1c62e63
SHA512 74c5696528cb629ff90be5ac703509658f088d0e701dcd9b737b7181bf828333b0f7483a2c14f6299747e9f392b6f83f649ab289605baa90a4b8453f57e9c84b
SSDEEP 3072:/2BiUSmFUWT+OyNMHWTEg2DqjdTQXKK1REJcXTXBJ0zBV+9vqzuBLgWlkly22cHB:/HUSmFUWT+OyNMHWTEgaqjdTQXKK16Jg
MD5 SHA1 SHA512 SSDEEP