Overview

overview

7

Static

static

6

a485a78f4a...18.apk

android-9-x86

7

a485a78f4a...18.apk

android-13-x64

Analysis

  • max time kernel
    14s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20240611.1-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
  • submitted
    13/06/2024, 07:57

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    a485a78f4a94835683378609d6cb2298_JaffaCakes118.apk
  • Size 2.5MB
  • Sample240613-jtkd2azfjd
  • SHA256 0ba8251ee5e8efec6c78aa03653b3a681785192fa0725e327559b90b9b78f8b4
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
bankerdiscoveryimpactpersistence

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
    bankerdiscovery
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
    persistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact

Processes

  • org153.geometerplus.zlibrary.ui.android
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4272
  • org153.geometerplus.zlibrary.ui.android:library
    1⤵
      PID:4311
    • org153.geometerplus.zlibrary.ui.android:crash
      1⤵
        PID:4360

      Network

            MITRE ATT&CK Mobile v15

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            books.db-journal
            • Path /data/data/org153.geometerplus.zlibrary.ui.android/databases/books.db-journal
            • Size 512B
            • SHA256 33972d2f3f173bfe6a7a820040ff4900dddeb7b2198976bfd481354e57619ed1
            • MD5 SHA1 SHA512
            Submit Download

            books.db-wal
            • Path /data/data/org153.geometerplus.zlibrary.ui.android/databases/books.db-wal
            • Size 309KB
            • SHA256 12a73d1db148f2d5fcdb36e650c54912035eb2998ce3a54f23b6bb3262686b0f
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            config.db
            • Path /data/data/org153.geometerplus.zlibrary.ui.android/databases/config.db
            • Size 4KB
            • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
            • MD5 SHA1 SHA512
            Submit Download

            config.db-journal
            • Path /data/data/org153.geometerplus.zlibrary.ui.android/databases/config.db-journal
            • Size 44KB
            • SHA256 316960987509b222c37666ccf29392a5a8662d45ddf79e1803c0dcc8b351c0c9
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            config.db-shm
            • Path /data/data/org153.geometerplus.zlibrary.ui.android/databases/config.db-shm
            • Size 32KB
            • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            config.db-wal
            • Path /data/data/org153.geometerplus.zlibrary.ui.android/databases/config.db-wal
            • Size 36KB
            • SHA256 a90e51dd18d6fa5131b657adbf4ee3ce0f958cc2cbf49785d0619b970b25447e
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            abf3531c1a6d5f50849b3b4d000098bf
            • Path /data/data/org153.geometerplus.zlibrary.ui.android/files/abf3531c1a6d5f50849b3b4d000098bf
            • Size 16KB
            • SHA256 0e2922ca6593a8f733373472435a2754fc1cf6368e1f91b392e8968fdedd61c8
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            abf3531c1a6d5f50849b3b4d000098bf-journal
            • Path /data/data/org153.geometerplus.zlibrary.ui.android/files/abf3531c1a6d5f50849b3b4d000098bf-journal
            • Size 512B
            • SHA256 a039cfe0d8691daa168c7fbd318ae26261bca29cc6033140f2a6a83206b985f7
            • MD5 SHA1 SHA512
            Submit Download

            abf3531c1a6d5f50849b3b4d000098bf-wal
            • Path /data/data/org153.geometerplus.zlibrary.ui.android/files/abf3531c1a6d5f50849b3b4d000098bf-wal
            • Size 28KB
            • SHA256 b5f40dcff70d632389743cc46fcad0a2630c6a2ca87fdc8e6e3d0507ba67c7b1
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            mishuzhanga.epub
            • Path /storage/emulated/0/LaBooks/mishuzhanga.epub
            • Size 981KB
            • SHA256 77338496f9fcd7628e6f95558d5d31088c5964ee8e2392afb1cce046ebdd1389
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            abf3531c1a6d5f50849b3b4d000098bf-journal
            • Path /storage/emulated/0/youmicache/CCA9582BC81E888EA674F157E5540CF8/abf3531c1a6d5f50849b3b4d000098bf-journal
            • Size 512B
            • SHA256 bf04c0d4271beef05ead6d59e3cc4099264bf776926564aeb063eaf1db0caa75
            • MD5 SHA1 SHA512
            Submit Download

            abf3531c1a6d5f50849b3b4d000098bf-wal
            • Path /storage/emulated/0/youmicache/CCA9582BC81E888EA674F157E5540CF8/abf3531c1a6d5f50849b3b4d000098bf-wal
            • Size 28KB
            • SHA256 c6d1123aef936ee84f28fd5f5411975719abb194373d3615c9396f93bc013115
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download