9b810cd2c0fd928830a3365c83bb51ebbb8755d8dcc01e331244bf47a7a81dea

Analysis

max time kernel
178s
max time network
148s
platform
android_x64
resource
android-x64-20240611.1-en
resource tags

androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
submitted
13/06/2024, 11:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a55b2ed02490254f92796a1b32607e10_JaffaCakes118.apk
Size 2.0MB
Sample240613-nv2f6a1epp
SHA256 9b810cd2c0fd928830a3365c83bb51ebbb8755d8dcc01e331244bf47a7a81dea
MD5 a55b2ed02490254f92796a1b32607e10
SHA1 7972b440b28a93557cbc8d55f50bf88123f85f9e
SHA512 acb94411e50c545cd6b960596ddb3db49e3e3336a68c03621d2b34b2fac31cd81774270cd35e572d24a921e5cb2b162eabc275ea34782c12f6d5944ee4b6983a
SSDEEP 49152:rd2A7z0MPsWBTjOh8yAobZhfpu6YT7BV08Qd:rFz0M1jQ8UZynPBV0F
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery evasion persistence

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.myapp/cache/DA39A3EE5E6B4B0D3255BFEF95601890AFD80709	5020	com.myapp
/data/user/0/com.myapp/cache/DA39A3EE5E6B4B0D3255BFEF95601890AFD80709!classes2.dex	5020	com.myapp

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.myapp

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.myapp

com.myapp
1⤵
- Loads dropped Dex/Jar
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:5020

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

DA39A3EE5E6B4B0D3255BFEF95601890AFD80709

Path /data/data/com.myapp/cache/DA39A3EE5E6B4B0D3255BFEF95601890AFD80709
Size 2.1MB
SHA256 a1874afbe0441c906eaaebc03f9a7a647729c6e9e75a7cdb34bef7742438e0b4
MD5 ec4d46c643c29ee1367bf791e701ada2
SHA1 820d491b682ef5ea4634a73fef5987d00c276150
SHA512 4d351ab5365bbfcb01abebf9176d6ceb21f6cb56532412485d90524ea3f39207635bae8e4382bdd37959532b672ca249b2084529c8641109a6ff1c4f5a8f36a7
SSDEEP 49152:qP4qmDiikRStoIxwYmecfg1/Nt5IK4nnhlJT0ZyfCz5:qAqSiicIVyHY1VtOhnhlJT0CCz5
MD5 SHA1 SHA512 SSDEEP

Submit Download