5f9cba189665ccadf6c1c63d956949fc43bc2fb37cf312911d5f1530892405f5

Analysis

max time kernel
160s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240611.1-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
submitted
13/06/2024, 13:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a5b67f8321094b5c1dcdfce22f791e9b_JaffaCakes118.apk
Size 11.0MB
Sample240613-qfc65azfle
SHA256 5f9cba189665ccadf6c1c63d956949fc43bc2fb37cf312911d5f1530892405f5
MD5 a5b67f8321094b5c1dcdfce22f791e9b
SHA1 5cf6463f7fbdd180a7b4aea3db637a82f050854f
SHA512 64cd016fc6b2b1b662aa38aea57e13ec93207769e36047e94a970358fb81d33645bb9dc0883ce4a458da6c3d0c43a3747ff82579590761cb1d3aa655b0ebf794
SSDEEP 196608:IDuhsKZi+9HOwgz/xH11NFUlrMV9aHrTzXQNXu/zb+r4rnyS1Xuf1l:IDALiKVe/N6lYVorXQNXu/+k31XufL
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

banker discovery

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.blyts.parkour.activities

com.blyts.parkour.activities
1⤵
- Checks CPU information
PID:4266

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

analytics.db

Path /data/data/com.blyts.parkour.activities/databases/analytics.db
Size 20KB
SHA256 1b608ef7cd11ece95a7bf986946f0e0496274874f54299f4c59f60ef57fa6947
MD5 2106f1ecd085889194a15a55e8959344
SHA1 fca35fa0317bc5d9f180e92d5c9f722e4942d5d6
SHA512 2d98697a135d10fe44da81172855e682982d17943076339f28f7202a0c3ccd8768bc67fd69ed16863f8321e2971b8e7ee5d3b5aa90ce8eb0a52da1c86dd58abe
SSDEEP 12:TD3yNTSFbyAiIhnbM3DtzRmBEyPbAVOwm+memKSsWC3Uu+dfnLjw8RyxEOH:T+yDYZgGSEkFKSsWwU+8RyXH
MD5 SHA1 SHA512 SSDEEP

Submit Download

analytics.db-journal

Path /data/data/com.blyts.parkour.activities/databases/analytics.db-journal
Size 512B
SHA256 27961c9f9d200ab419df647b3f024780932ef96dda823a40aa3249e427e1c020
MD5 40fa571a922b397fd201dc8de8fc9d74
SHA1 ce0864bd0954c467d169abe165922c9e8663426c
SHA512 e5b9b0a10bb1162dd9be9d8c9200bc642e36580619cff818617e4226f66a4b0b2d8257ce158875fb726116416ca1141141000f6cf986a20b1883a26227b8c066
MD5 SHA1 SHA512

Submit Download

analytics.db-wal

Path /data/data/com.blyts.parkour.activities/databases/analytics.db-wal
Size 40KB
SHA256 c7420e116b5d2d301686f9abc8fc731b5af59b71a220f9e43695d4defd2ac3d7
MD5 b2a8dfc6661f556ecad3da46c46525d5
SHA1 c85f1d34fe6368d48d472f809b379bad3a71eaa2
SHA512 5fe60f74856adbc711d141c232d6295979d9618636a3504a3e6a854073678a15c930e0a20e0decb2b314a992e1dd5e9e39ccc9b3e15c38c226d4a9e4243e6549
SSDEEP 24:K+oPazyGSP/TF+yDYZgGSP/CFKSsWwU+8RyX5F:gPazNSP/5+84SP/CFKsS+ypF
MD5 SHA1 SHA512 SSDEEP

Submit Download

manifest.db

Path /data/data/com.blyts.parkour.activities/databases/manifest.db
Size 40KB
SHA256 6405b02ce97a455c23dab58ab8cbcbfedf4c52fc4e9acafa879a8f5176529e9b
MD5 317a61b08c2ea814d950d0d86df3b9df
SHA1 c3d71a104bd0f61bdfcb10eeb962734143fc0574
SHA512 03495ae8bdbc9cfed1c5bd71aeef15f5ed24353624d2ac3c094114047055b8f330e764272bdc4a911475a7f1bbaec4358e3d81ed3d48590c0626a72a24ffa5ca
SSDEEP 12:TUcpKpJ/TPCFamEyqwAab0bmF/bNFMEKLzQbIbO5Sm2a1FBI5BUKstWS9chBNNR5:TUco52elmn6FL8z+UKWVchb2GSvIee
MD5 SHA1 SHA512 SSDEEP

Submit Download

manifest.db-journal

Path /data/data/com.blyts.parkour.activities/databases/manifest.db-journal
Size 512B
SHA256 bd822b9eb89d796243262d5b52811ccd3b31ed5c15f59313d374352c6f4cc0b0
MD5 c1e82002d3b47dd7b1a8c9b7aaca1204
SHA1 411da5282af5d41d731122dc2f47059940efb3c6
SHA512 cc1e3007e119685a862b68ef0fe78b5400839456904922a0160f1a3a98fd6c9349ea32d47f2261ac2b4e9ce6a32bba9b2c4dd03a21b447f1d0c35d4726c05715
MD5 SHA1 SHA512

Submit Download

manifest.db-shm

Path /data/data/com.blyts.parkour.activities/databases/manifest.db-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

manifest.db-wal

Path /data/data/com.blyts.parkour.activities/databases/manifest.db-wal
Size 52KB
SHA256 a91857c2a18066b1bc1d120319a9a6bbcd84d1f48802a445dd7eded5f11fb762
MD5 ff50879cb12fec8f45f6e7795b53bcec
SHA1 5afdcdbd3576d810a7abadfe5a3b565d3fe69c2c
SHA512 fb67869ab74852151a1edaa02d8600fd16798e287cae38ff9b2114753f576287edaf8b8beb7c786fcce322de04b5d398fd78c52eac30e4b16a1570c949664368
SSDEEP 24:KPqzyGSP/Qs17Uco52elmn6FL8z+UKWVchb2GSP/5f:7zNSP/jdUc4zlmGU+xb5SP/h
MD5 SHA1 SHA512 SSDEEP

Submit Download

of_prefs

Path /data/data/com.blyts.parkour.activities/files/of_prefs
Size 82B
SHA256 1ab7b773c68626d7403a01dbe1695b2c58e9c3a784054f7e77ecf114747cb009
MD5 1c1fd4a16b1a71d375fb65bf664a8cab
SHA1 288042957095f16347f663ccaaebe97663521c93
SHA512 d3733e53010d74a21f3dcf93035c2bead06dee0d14746f83972cbad2899b488c7826f0cefa4847015e05739506e6e201616d89a62a1980ee9df3b32c782fa192
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads