49c8ef6d28ec25d9de155748d2e52fa35bcdfc4406c23967a411f122d741458c

Analysis

max time kernel
16s
max time network
134s
platform
android_x64
resource
android-x64-arm64-20240611.1-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
submitted
13/06/2024, 12:27

Target
a587f216ea8072e41ec68ed53d9027af_JaffaCakes118.apk
Size 5.0MB
Sample240613-pmwrdasfpm
SHA256 49c8ef6d28ec25d9de155748d2e52fa35bcdfc4406c23967a411f122d741458c
MD5 a587f216ea8072e41ec68ed53d9027af
SHA1 203d9ca468f3b366b4257e6695e60c81d953f9b1
SHA512 56d01bd019219f1702e5bc0c1d7214c47a8af666f6995aa8f9c20225c3026db2c8d2dcd2982937af7d94581e9fd27b778748ffa8422ea22a6472ba4c7b4a1fe8
SSDEEP 98304:Xe5aO4y8gdqHlM64e9OwV4MWLSRlE9XIlBExWJSXE:uFJqHyTe9DDkyl0XIlBEIT
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

discovery

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.lxwx.tom.pkxyxmp

Queries information about active data network 1 TTPs 1 IoCs

System Network Connections Discovery

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.lxwx.tom.pkxyxmp

com.lxwx.tom.pkxyxmp
1⤵
- Acquires the wake lock
- Queries information about active data network
PID:4643

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact