11a6625dde022cf6792941eecb798c090bbde944c1e531d21a952efaa7c24c2b

Analysis

max time kernel
7s
max time network
147s
platform
android_x64
resource
android-x64-20240611.1-en
resource tags

androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
submitted
15/06/2024, 23:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
b0a08ce94a45ee6da313df80303d9dda_JaffaCakes118.apk
Size 6.0MB
Sample240615-3ac1dsyeqb
SHA256 11a6625dde022cf6792941eecb798c090bbde944c1e531d21a952efaa7c24c2b
MD5 b0a08ce94a45ee6da313df80303d9dda
SHA1 49ca67c6bb3f582a46c8c833193a1e64d3d6850d
SHA512 74e69b93d437265c47d2fd7ff077c5fc0b6d90347a76109b514e0044027a187c96542541855285ad64a9765e91d7c68bb706a5c9b086aacb876567cefe579e55
SSDEEP 98304:9MqbjUOY4goKKF5aB5hnV1HPvPltQxDhsXbfaAHY/kujZhjXVxbh0DQHx8nxzm:9bU4g0WHnV1HPvL4DhSaasHZxVr0DMGU
MD5 SHA1 SHA512 SSDEEP

Score

4^/10

impact

Malware Config

Signatures

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.hxyd.ymfund

com.hxyd.ymfund
1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:5174

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

.dev_id.txt

Path /storage/emulated/0/.dev_id.txt
Size 57B
SHA256 22d9ebb8eff4f29e5f033ac05c9802fad67851e20422f742543c1641410230ea
MD5 b90412967c2da87b86bdff388601bffe
SHA1 57b6b533321508a0e3cfb4b05abe1dd9457f75d8
SHA512 7eafb05759283b5eb9b0c34d5c1906aa87ef211705dd08d12b18684c1ba00641d1a01448487eb658aad3e5bbc14000944c80e2d70abef6cc7c25f8902edc62a4
MD5 SHA1 SHA512

Submit Download