0d9166af12a8f92090f451d3f457b78d8af2bcd527e0590d9193efbe68a52620

Analysis

max time kernel
23s
max time network
170s
platform
android_x64
resource
android-x64-20240611.1-en
resource tags

androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
submitted
13/06/2024, 23:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a71c62a3ff65beb7a952ee74ccbee676_JaffaCakes118.apk
Size 27.6MB
Sample240613-3gp9asvgkh
SHA256 0d9166af12a8f92090f451d3f457b78d8af2bcd527e0590d9193efbe68a52620
MD5 a71c62a3ff65beb7a952ee74ccbee676
SHA1 bbb56c374dc5cba63294009d892de777622fc399
SHA512 8b2cfc7218f16de02ec0f8834fd5745764a69484d2f59bd7a790fb34be6efb6b41fdbf61fc00dfcf3fad23cf04e06212bc4ad2be05b728a4d427decaa7e24682
SSDEEP 786432:yrASIr09q8gDYtXSht5VwUKMj38C+ENHrxp+T7PtBTM1z:yrAS5qTDWihtXMMz8qHL+P1py
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.enormous.powder/files/stares/updates/sta.jar	5075	com.enormous.powder

Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.enormous.powder
1⤵
- Loads dropped Dex/Jar
PID:5075

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

sta.jar

Path /data/data/com.enormous.powder/files/stares/updates/sta.jar
Size 1.8MB
SHA256 18d90827352cf0ed3084c4f1f94d98026908f674914889e1e58c2ac5e68be63f
MD5 8ec43e10005ec4bc91c4e45b8e68e304
SHA1 66fb42cb11e77900e55cbd4a8e247841dad1c5ea
SHA512 6077f32c03361faa552bde6c7cb9676c6393a9b7a30a9622095e6eb93da484b29fd75edd955523c8b51d4e86fe4a19fbce5cc456f7612162dbdec76e43b563d6
SSDEEP 49152:kORoNccoT875hzBwbAqEAdBXrcZzVCuSow:kORo6kha0qjXGzoow
MD5 SHA1 SHA512 SSDEEP

Submit Download