5f9cba189665ccadf6c1c63d956949fc43bc2fb37cf312911d5f1530892405f5

Analysis

max time kernel
162s
max time network
151s
platform
android_x64
resource
android-x64-20240611.1-en
resource tags

androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
submitted
13/06/2024, 13:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a5b67f8321094b5c1dcdfce22f791e9b_JaffaCakes118.apk
Size 11.0MB
Sample240613-qfc65azfle
SHA256 5f9cba189665ccadf6c1c63d956949fc43bc2fb37cf312911d5f1530892405f5
MD5 a5b67f8321094b5c1dcdfce22f791e9b
SHA1 5cf6463f7fbdd180a7b4aea3db637a82f050854f
SHA512 64cd016fc6b2b1b662aa38aea57e13ec93207769e36047e94a970358fb81d33645bb9dc0883ce4a458da6c3d0c43a3747ff82579590761cb1d3aa655b0ebf794
SSDEEP 196608:IDuhsKZi+9HOwgz/xH11NFUlrMV9aHrTzXQNXu/zb+r4rnyS1Xuf1l:IDALiKVe/N6lYVorXQNXu/+k31XufL
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

banker discovery

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.blyts.parkour.activities

com.blyts.parkour.activities
1⤵
- Checks CPU information
PID:5081

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

analytics.db

Path /data/data/com.blyts.parkour.activities/databases/analytics.db
Size 20KB
SHA256 58b4faf0242880c2ce269b44b22eb7e63169958300c6c28ea1f8b7e0ea75a7d8
MD5 aa578c170477098a08afeb7e6564d8b5
SHA1 e9e550a7e8d33a97983068418aeff4d1ff0149d0
SHA512 4775e66fb030b2751a1f2414405002d13ebacba5619acf2cf6d5f2c00ffe7d0c094022e1022a7f10ed3b5d55fcfc3a487ef4e9be844d5aace9a39899f60b389f
SSDEEP 12:TLyKEiyNTSFbyAiIhnbM3DtzRmBEyPbAVOw2wu/emK/W8DXdf2xrKEOH:TLy93yDYZgGSEC/FKegCKXH
MD5 SHA1 SHA512 SSDEEP

Submit Download

analytics.db-journal

Path /data/data/com.blyts.parkour.activities/databases/analytics.db-journal
Size 512B
SHA256 283f58e79349b846dae2b2eb063e8b682e69c6c86865f6e8efa3d47841c54361
MD5 85c69308fb2783dd0b17582e85031114
SHA1 0ee3f49909b7d6728e50fc99917e43ac4c2d715f
SHA512 69a298ba1bd8d280149339e691c7fda708b48bfda9ae768e5358b501434205b757e358fe7f0ee6fd95421138ce62a89dcd4696be74de6b252d350c8917bcfcea
MD5 SHA1 SHA512

Submit Download

analytics.db-journal

Path /data/data/com.blyts.parkour.activities/databases/analytics.db-journal
Size 8KB
SHA256 d53e618565acd163819cf5b6750bbbb68417cef19d05891f5688f17ec971361b
MD5 4f791251a646477789651a31a7d68a47
SHA1 87d1767fb3f62c96e70eda121c15974bb718f856
SHA512 ebbec9202d019919ce04fa0046ccdc5983cd8897e1060cea9fe612c5f2424c19ee9dc4eea0753cae3fdf1a244f55344cd597837e6d13e0fa1751c0d0e37f67fa
SSDEEP 6:7+/l98S4n10Og9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKY:7+tB3OqLiuWdwRmBEyPbT
MD5 SHA1 SHA512 SSDEEP

Submit Download

analytics.db-journal

Path /data/data/com.blyts.parkour.activities/databases/analytics.db-journal
Size 8KB
SHA256 bd207ddfaec9c3648e8332ca4725ee4725893e2f7963f1ee0b5d9a4bec7e3af3
MD5 94f1f01f7539d566f8193b03c67317ec
SHA1 acddc7e419ba8dd829ce54f7939cfafdf9e7dae4
SHA512 37e08fde0b81f0eb953831e7f0980d84ce93a555bf3e3ef88f7095f4205db0b38d32e3e9aa2082918067bb98bae534f136ddd2573b7e6448b0021441fabd2899
SSDEEP 6:7+/l9mMl4Pg9bNFlLdrlOERX4PBX4ogLugMBX4suuKYC/xn:7+tsnqLJdTRmBEyPbvSx
MD5 SHA1 SHA512 SSDEEP

Submit Download

analytics.db-journal

Path /data/data/com.blyts.parkour.activities/databases/analytics.db-journal
Size 12KB
SHA256 4f521705d3bbbd95ae018b7a59fb1cc02d21370e36a2e5a4fe219743f0830478
MD5 c1d2e509bb7644045847b850ffbbe74a
SHA1 5bc19414d65fda1324da4bbbf97364ce3949ca83
SHA512 d6654118a0bba5240a2903eb91e04bf642961767b3ca1a3bb333bca431e445477b4c822ac1ab485da2481c63f90abb44e0bef3ee6e6087e9998751d8c8e8af51
SSDEEP 12:7+t/knxvqLmsyNTSFbyAiIhnbM3DtzRmBEyPbc:7+tkvqL8yDYZgGSc
MD5 SHA1 SHA512 SSDEEP

Submit Download

manifest.db

Path /data/data/com.blyts.parkour.activities/databases/manifest.db
Size 40KB
SHA256 385f04231e673f0e3a12798e217094d95c490aea9310feb804d326852fcbb14c
MD5 cd29e9330d5ae80b6b51644665c27466
SHA1 28edd8f6ca5b38c7d46902c23ef074b7dc1fc476
SHA512 6f166ffbbfcc9ca56bf241c8fccca5039a4ff6f2c53ee0f743727622cde556676e66f8a638257ee1d5ce2ec44e299f890ae92bc9f465677b35577db619f7060f
SSDEEP 12:TLXppKpJ/TPCFamEyqwAab0bmF/bNFMEKLzQbIbO5Sm2a1FBI5BUKstWS9chBNNX:TLXpo52elmn6FL8z+UKWVchb2GSvIee
MD5 SHA1 SHA512 SSDEEP

Submit Download

manifest.db-journal

Path /data/data/com.blyts.parkour.activities/databases/manifest.db-journal
Size 512B
SHA256 e6714e3399a36482595970d4c193835608084a36534fd97a075fc55fc8ee19a5
MD5 c533ef0cb301a65a08457eb787d4d37f
SHA1 a71b8936843fe0cf93bb2078162050f3f460764c
SHA512 eda523060be981efa4d3feb8e1de5409a6aa0ee03005847be845c456513ce398ac1d5dc4ef8848b320e828fc106b553965196d4037d2892c9e55a1434ac7506e
MD5 SHA1 SHA512

Submit Download

manifest.db-journal

Path /data/data/com.blyts.parkour.activities/databases/manifest.db-journal
Size 8KB
SHA256 9b81301268a575f8f2d6fd60a73132339b8f9dfe87db7043bebe9f2651c51057
MD5 01ea3204e805e9de9308d74bf597110e
SHA1 655cf3f966d3650a15697d64119b0a3bd049b9b4
SHA512 ef2d7b71170516d918bf4659bf84c2e43718e0b9cbab6806a8279e833834c9736355017a730f1fa724b9897a242afaed29cc998b0086cb5019274d95879a32d8
SSDEEP 6:7+/l9Xn1Mg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKoI:7+tQqLiuWdwRmBEyPb2
MD5 SHA1 SHA512 SSDEEP

Submit Download

manifest.db-journal

Path /data/data/com.blyts.parkour.activities/databases/manifest.db-journal
Size 8KB
SHA256 8f461f3c081b74ef2ab86a8bc533ae3ad313ddbaa1c4c1c2bf855da430031d9b
MD5 8ea7993b7501c011e42562438902b857
SHA1 ca89f5a20d0a9496f48135603e884040715a4fd9
SHA512 a59b09b0f043ee97fa2cc26847b2fb9837de8192bf01740e1d0d4e1c1462db077980acd0b85d9246515f59843ce7db801fc3b25aa628cb5131da59b0923443fa
SSDEEP 6:7+/l9jp4Pg9bNFlLdrlOERX4PBX4ogLugMBX4suuK4vz9s//v:7+tBmqLJdTRmBEyPbjsv
MD5 SHA1 SHA512 SSDEEP

Submit Download

of_prefs

Path /data/data/com.blyts.parkour.activities/files/of_prefs
Size 82B
SHA256 1ab7b773c68626d7403a01dbe1695b2c58e9c3a784054f7e77ecf114747cb009
MD5 1c1fd4a16b1a71d375fb65bf664a8cab
SHA1 288042957095f16347f663ccaaebe97663521c93
SHA512 d3733e53010d74a21f3dcf93035c2bead06dee0d14746f83972cbad2899b488c7826f0cefa4847015e05739506e6e201616d89a62a1980ee9df3b32c782fa192
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads