cdde7a6cc0dd4393a4e1a7ef2825689103acfa1339b067697043215530fee66f

Analysis

max time kernel
5s
max time network
146s
platform
android_x64
resource
android-x64-20240611.1-en
resource tags

androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
submitted
14/06/2024, 12:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a9bc4ff2d5d69a445c34207b16ee4911_JaffaCakes118.apk
Size 26.4MB
Sample240614-px3yfa1dnd
SHA256 cdde7a6cc0dd4393a4e1a7ef2825689103acfa1339b067697043215530fee66f
MD5 a9bc4ff2d5d69a445c34207b16ee4911
SHA1 a525d4c881e4b148a0d7e5158a9cedb46b4625c6
SHA512 4a05aa93c4acb70bc78e89d5ae1ed1aab10ad2af740ab6500b468b00c17bced3664bf415a41d065ab525c1846292ad4525d74ea82fe4302d3ced9503791c6293
SSDEEP 786432:qOm/XX+r/OOljOvuMaZUMjArKMtylihWu1Ul:36XaOOljmufljArf0i1Ul
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.sg.atm4.wdj/files/sg.dex	5036	com.sg.atm4.wdj
/data/user/0/com.sg.atm4.wdj/files/sg.dex	5036	com.sg.atm4.wdj

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.sg.atm4.wdj

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.sg.atm4.wdj

com.sg.atm4.wdj
1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
PID:5036

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Process Discovery

T1424

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

sg.dex

Path /data/data/com.sg.atm4.wdj/files/sg.dex
Size 1.9MB
SHA256 ae45013c64c9d799777d7760d6d66599231cf09a5bc89d4ee1cceffe1ac48f9c
MD5 760099a6f9e1aabe202e04187be4d2e3
SHA1 c2e66803bcafad40fa8f5210403769a2b0429f30
SHA512 0d3fb84ecc4cbfba53212007113a916d20df3e9302e8f63d533912c5606fbdf42306103274101ddb47d7fc684fec93f8f30103b3b448b6bb2773cd428aa17246
SSDEEP 24576:whX7jufYrC97WhFCV5dBlrB5lETzYU7HzwFHxxd404DCi3i:SExV55aPYFHfL
MD5 SHA1 SHA512 SSDEEP

Submit Download