2e06f8b122b79a21f53c8ae5dcca3a2967b95d1df57c6429c134c26595f0c939

Analysis

max time kernel
49s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240611-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240611-enlocale:en-usos:android-9-x86system
submitted
11-06-2024 18:27

Target

9f2410ee38f11aa2e37717a36353524e_JaffaCakes118.apk
Size

11.1MB
MD5

9f2410ee38f11aa2e37717a36353524e
SHA1

b1759f09599c79467650fd20248ebe21be751d71
SHA256

2e06f8b122b79a21f53c8ae5dcca3a2967b95d1df57c6429c134c26595f0c939
SHA512

6922843814622c5f0c9a0e166f5d1de1a572ea8e4339c801d26928af9f7029bef7561f56ceaaacbbaa180d5e8346d64a66f42d055262b92708c6472afedd7bf7
SSDEEP

196608:PZsAN+jIKa3Q/EsJTY16JoJIE38ZjMfvlqt4T5Y/QPN:yAcjaKhY16JoF3xHcyYgN

Score

6^/10

persistence

Requests dangerous framework permissions 12 IoCs

Processes:

description	ioc
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

T1624.001

Processes:

com.nd.android.pandatheme.p_yinyangshi20161109

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.nd.android.pandatheme.p_yinyangshi20161109

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.nd.android.pandatheme.p_yinyangshi20161109

com.nd.android.pandatheme.p_yinyangshi20161109
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4252

/storage/emulated/0/pandatheme/dx.apk
Filesize
8.4MB

MD5
38cf7f560430ccd33887e6cf3b4ad696

SHA1
23a90e3d23a1fd87b5948be57e904f63d7ef18b2

SHA256
4eb0a9241deb8176a85d30a755e403c3623acf12cc46b7a9738cb90bea10e73f

SHA512
1f147fb51fb80c4a789c126ef72740829c05d6a86611308733ee68ce872e945f9739816604069a6b116afa7b2b262a118b60c76b0fd613b447a7bfac65dabb6b

Download Submit