b0cc1e4d1553896a75067df3ca5a95865426a69bae009acde6a7e71ef9aaf3c7

Analysis

max time kernel
19s
max time network
148s
platform
android_x64
resource
android-x64-20240611.1-en
resource tags

androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
submitted
14/06/2024, 11:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a97481b80c8c7f7e1b0f6355ef07f939_JaffaCakes118.apk
Size 15.9MB
Sample240614-nnzzrayfmb
SHA256 b0cc1e4d1553896a75067df3ca5a95865426a69bae009acde6a7e71ef9aaf3c7
MD5 a97481b80c8c7f7e1b0f6355ef07f939
SHA1 44c2f3d849781859737c3755f2273e98a455490d
SHA512 88e9c783fb45bcc5843679867e4c400b5d8308b91013f5cd443f78be5f0bfbb4be121a354202f5d847bf09728f121c2aaf668cddc718d257cc8a0b437733c55d
SSDEEP 393216:cCkbN/Mza0gRU3cvGEdOSDrijos3QGPKVzf2vLqGZyCsy9SflF4:8pMzxSvhOSnXGPAT0ac+l+
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

discovery impact persistence

Malware Config

Signatures

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.giantssoftware.fs18.google

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.giantssoftware.fs18.google

com.giantssoftware.fs18.google
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
PID:5203

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

DownloadsDB

Path /data/data/com.giantssoftware.fs18.google/databases/DownloadsDB
Size 28KB
SHA256 68a0ceb2b4920452dc324fd95859fa999f4c1648e765c59a5483a82b8c4587de
MD5 fe85c0e4f5d8251763da4dade594124a
SHA1 b2196d13d889168808cc301e34a1a5259877e8f9
SHA512 50bfff7541d4cac4d85c923963f37301320b24bf4b190b83773f2ae52cae572671f99fdba1d1b7f952e571a459a96f5d775c3410f36edcceceef8f7c324d5e4d
SSDEEP 12:TL1RJaED07OlukTiQoJGuTABWZlZwrERI1x11ERmBEyPbGtOwG:TL7JwSlZCJGuDlZwrEM3GSiG
MD5 SHA1 SHA512 SSDEEP

Submit Download

DownloadsDB-journal

Path /data/data/com.giantssoftware.fs18.google/databases/DownloadsDB-journal
Size 512B
SHA256 b676b08e42044dbf9fe5b277a20c404913d50e0fff41ffd7c0cbe2355c7c14ec
MD5 11ac0dd964849c8435de3dc4771b4601
SHA1 3e3fcaf837649335141a5038fae7121298e6d500
SHA512 316e065635d9ac422c7b3590665d3abc8d0e07254afc1156023b54618102692a1a4f5a26c7c065d7a837585c49f963d68c0ff721c3767757c357d329c299af62
MD5 SHA1 SHA512

Submit Download

DownloadsDB-journal

Path /data/data/com.giantssoftware.fs18.google/databases/DownloadsDB-journal
Size 8KB
SHA256 c24254d795237089a7e79182180b73e5370ea1c98c588a612284b420043fd776
MD5 5bee3373e3a51be26b9503fbdd853f2e
SHA1 86647612a86b467544a14df37ba0af5edecca153
SHA512 f1cbe00aa29499d54081fe135d89bd8e530d130a5f3cd5b40488628a48317ead028d6a9ec832334da62b7f91ff14ef601b119e14df815f10df28f0aa5e8cf2e9
SSDEEP 6:7+/l9E5UHn1cIWg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK3L:7+tEUCDqLiuWdwRmBEyPbc
MD5 SHA1 SHA512 SSDEEP

Submit Download

DownloadsDB-journal

Path /data/data/com.giantssoftware.fs18.google/databases/DownloadsDB-journal
Size 8KB
SHA256 2fe1c94cc455ae7c690eaed77d5d631472abe2c747596b39765eb76851c2a482
MD5 eece46c4d9683fc8a9a7b718c281994a
SHA1 8c9bae2ce6cd28321c61a897a921d128126f1ad5
SHA512 fd257660a4837f9f5ea4906012ae351870c2124748111096fbd8266c590e84bd1d81be9d0c66f767a51adf524377663b1855b8b09c7ef8036ae13fd3274320ba
SSDEEP 6:7+/l9RaPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKZ//+C:7+tKqLJdTRmBEyPba+C
MD5 SHA1 SHA512 SSDEEP

Submit Download

AppEventsLogger.persistedevents

Path /data/data/com.giantssoftware.fs18.google/files/AppEventsLogger.persistedevents
Size 403B
SHA256 1d00a3ee0237341c82f7abc9fa5483b87e44033d37d028624abedaf3e79f6a67
MD5 233d9109fae1477dfdb5cd975ea91b03
SHA1 f7bf4b28ce698c5f4caeabc443165fcca0db46f9
SHA512 772b7266a8b6fc377a9a5a4245b2ffbf5e6522e72410011e7219ad07cc96debb3a1cbacecb926d737e499cbd62fa8c361f71dddf7b08c2fd45853daaea2264a7
MD5 SHA1 SHA512

Submit Download

achievementMetadata.dat

Path /data/data/com.giantssoftware.fs18.google/files/achievementMetadata.dat
Size 38B
SHA256 5ed1bc0d13495c2ab52d75bde91262a12b3ffa1316f514d687d4908bbbf7ca10
MD5 b519fb9761eb644994cf83a069ad6776
SHA1 db32874bf8007ceb2c9bb98c7f2cac77cac9769c
SHA512 8cf09208b9709cfe795e739da6c79bf0c316da93d855c6a3ccd4974fc71b8fee0bdf083bc2a391317962330d02286d463a5284dce22645831dc35ed6bf06fcbf
MD5 SHA1 SHA512

Submit Download

master.dat

Path /data/data/com.giantssoftware.fs18.google/files/master.dat
Size 80B
SHA256 8ee58c2fb4cfb54522959016ffd3f0f3f50bfa65c30769320c4a042cb2910c2c
MD5 488a12ff8d0ab269a1176e7645f98f2a
SHA1 ded6fbe57b914ce9d4298f69c9873a5d81e394af
SHA512 78186fbb99b75465cbb66a36117c248e19f968fd8cf6868bf09e0ac6dbb42643971662b54f78b153533094f9c267aa4f25d96eb301013d218820e8014ef9234e
MD5 SHA1 SHA512

Submit Download

save01.dat

Path /data/data/com.giantssoftware.fs18.google/files/save01.dat
Size 8KB
SHA256 c7d81007efcf2eb056ee665177082b9d0281f97310e553f80d6e8d6409c32607
MD5 e5cea115a20d4b7b9430dac41dc8f467
SHA1 17f0941e1aca3832d2599e2bfed065571a4e65ba
SHA512 c3f718c4fc8fdf08ea1d1a887931f4f8c8bf52d1e2da6813c555452532d4349b3c7c73213cb979fa8c29c560a43408ebf63a6eaa23b062db7c279ff03e13a79c
SSDEEP 192:MYlaP9ZLeHEf83fMAPwnpbkjcvbgM3sbZpkBKA8:M/VJeHEf83fZWDNsdoe
MD5 SHA1 SHA512 SSDEEP

Submit Download

settings.dat

Path /data/data/com.giantssoftware.fs18.google/files/settings.dat
Size 164B
SHA256 e094fb58984cc48bd84833a9999bc83abd23c1a5c57c9b274fb19033a142e5ed
MD5 b6445dd6134ad63b22d59932bc689b8f
SHA1 0f0b99a34fb101b28fbb9a90380870cb3a14e9a3
SHA512 2a9ce77a04b9245f9e90570dd2677fda846a3e8b131fed8abde5ba7d725d9bb960483565ab64442d4e3c06216c3f9df936a53007e02b50754f8a192da50abfe4
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads