7f3c4934206ad4d3ce678f4ed807b79495a26a9eef3126775b892740bf8de631

Analysis

max time kernel
19s
max time network
163s
platform
android_x64
resource
android-x64-20240611.1-en
resource tags

androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
submitted
16-06-2024 22:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b565efd2a014fc5d3feec2c8476fafec_JaffaCakes118.apk
Size

1.3MB
MD5

b565efd2a014fc5d3feec2c8476fafec
SHA1

dad797321821ad769bcea69e24365a8c7e42390d
SHA256

7f3c4934206ad4d3ce678f4ed807b79495a26a9eef3126775b892740bf8de631
SHA512

514e67f0d463db2670922fd77e029e98092897f3da9df8695f20975938187cd6f01ba0b3f1632344a38cd4516e36ee092c754adca002c39a0775360a3d34f8f8
SSDEEP

24576:R+oL0otaYtXMjG3dJZXs+bS8oaPnDAUCxFMOjDo+rsjLuFq/13tdHbZKm51Ob83f:DQ7YtPdJZJboaPDAUcFZjPojLuFq/1XT

Score

8^/10

discovery evasion stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs
stealth trojan evasion

T1628.001

Processes:

com.zzxg.embg.venw

pid process

5232 com.zzxg.embg.venw

pid	process
5232	com.zzxg.embg.venw

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

T1407

Processes:

com.zzxg.embg.venwcom.zzxg.embg.venw:daemon

ioc	pid	process
/data/user/0/com.zzxg.embg.venw/app_mjf/dz.jar	5232	com.zzxg.embg.venw
/data/user/0/com.zzxg.embg.venw/app_mjf/dz.jar	5440	com.zzxg.embg.venw:daemon

Queries information about active data network 1 TTPs 1 IoCs
discovery

T1421

Processes:

com.zzxg.embg.venw

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.zzxg.embg.venw

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.zzxg.embg.venw

com.zzxg.embg.venw
1⤵
- Removes its main activity from the application launcher
- Loads dropped Dex/Jar
- Queries information about active data network
PID:5232

com.zzxg.embg.venw:daemon
1⤵
- Loads dropped Dex/Jar
PID:5440

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.zzxg.embg.venw/app_mjf/ddz.jar
Filesize
105KB

MD5
23ba0b249042b7ba33e92c0199b0ea4a

SHA1
99b13ee9f7307316c2337953fceed87e9942b794

SHA256
1ed0751a141b17c80a921f5e8ba90c66a56b8e73156f5cbe133b57d550ca4ef2

SHA512
0cc88e2b7c2ffa4db274d690e3bf12098ec804b9fcd9e92b57d2fa0c4161031d2e84c91d86ba8e2b6e8b4837852defa099333f76bcd454c67b31632d0cdd4861

Download Submit
/data/data/com.zzxg.embg.venw/app_mjf/tdz.jar
Filesize
105KB

MD5
293ea5f01e27975bed5179ba79d80eac

SHA1
c5b0806a537fd1cb753e11f1a9684933317716b8

SHA256
8d86de68978e859c8262c0d0e932d3a1d57457b57ce88940620befab1bcead5b

SHA512
c7cd2881367fdf95ec4151449b359decdae1adf136388edbaaa9880c7ebd14fb3579e7a15600a856988c55d207f7ba1fd7d938f4d9168aba8a7ff1c3029d6b53

Download Submit
/data/data/com.zzxg.embg.venw/databases/lezzd
Filesize
28KB

MD5
dae68dcffc3d522a79f98ebbc3b6d457

SHA1
6df5dce9a50f12044a2d20b8d1742ae47b82ee03

SHA256
56cf91ca198812e0ef9ba4af0e96c08a32e24c917bcf2250bdebdfd7fd6f5286

SHA512
23b76f988399e9c9e4f5a7e8d19ecb765abdb115b0beee35f8ca9d221bbc5ee79f0152fac4261cc91eb9e7f874b5c6e9bff2dbb1812d31412d506cf83c16adcd

Download Submit
/data/data/com.zzxg.embg.venw/databases/lezzd-journal
Filesize
8KB

MD5
0d480e2376d8c89599fcf11d5d318b0c

SHA1
b2ef9f822c1dca5c454c29045c2f774e49347f40

SHA256
1f49cf69ff71f68baf7f57d70658e69f385c6a8794674a7b394e568ed367e6ce

SHA512
8e0d0b6e080131f83a0d8856c84e1738c649ad4a7bbf4385c32dce09a3575fdc74c400aedeee53c42cc7de3f688b95347a4d7e434c37ad46cba4fd967c0adfe8

Download Submit
/data/data/com.zzxg.embg.venw/databases/lezzd-journal
Filesize
512B

MD5
eb2f864e736e659ae606b284eed23c54

SHA1
b4c7d0d16c79d781f43052e6db4cff53486b4a6f

SHA256
c93107396ff51852425166c4801311a89fc6a225cceeb9c30524afa17aa20827

SHA512
67da51e590ffcd0e8b039ec2608b1b8b6362b2ba4ef946dd0ddba9b82674ff9a29259ba565ec0706daa835a934ab88d1d5b78d36e38da69856e70694954a8fdf

Download Submit
/data/data/com.zzxg.embg.venw/databases/lezzd-journal
Filesize
8KB

MD5
230586b8c0967e5054b6d4f97785b483

SHA1
4151a7944e864fcf9ceba33e8ca3bd60e276295e

SHA256
912bcd69a641a097ca5d83bb0393f36dd31b977374a8e026d8eecd989b10cd2c

SHA512
d08e5ccc2f6da28c34bba01a0a6c958b983dc20159c955c73965573ff11192fe35939700a0da59ea019ff39fe12b428af558540d4a241d6712ea55c20106312f

Download Submit
/data/data/com.zzxg.embg.venw/databases/lezzd-journal
Filesize
4KB

MD5
28c9a45aa4613bba5b11316d1df1a251

SHA1
73cf0aef166b20c7953a943ff064eb516d4c4a68

SHA256
c1b991b82eec967de1344839995d31ba117d6edf4caa24380d36ef1f7fa97dd8

SHA512
6e6bca29be16ba04e790d6d5ebb07b1c5a20949dfb8f5e9c890d6b291560016be657224eba78ed704654bac6c5cc536308972af87e82d8e596b32a5bad869e09

Download Submit
/data/data/com.zzxg.embg.venw/databases/lezzd-journal
Filesize
8KB

MD5
b151abc9be5b8ba83e0ab7a029a0b7c7

SHA1
a9be1f1bdaa91c1ff44fca19791e4d92c22f453a

SHA256
94f9fe872d38c8008d1cd6c2403e06ac9ae8c4777410b4f57c49285609dbe667

SHA512
8f3ade9e0185d5c08bbf2b2cab011e0f9d8d375296b1b59adde5364627c064ccbe514c051d4f51d326754b66b934a1780487e6feb3da4ef937f2ac1eed460a00

Download Submit
/data/data/com.zzxg.embg.venw/databases/lezzd-journal
Filesize
8KB

MD5
28c761adef2d511a0200592646dc1026

SHA1
e3192c5966b144b40e6ae7e874d22ea27c6ae768

SHA256
1cdda9416149d468eaaba1eda16ccbe933def1026bca1083f026d00af2b06151

SHA512
a00ed4c17b00264155cffb1c0df3012a1b62a68c30d93c30cd3570cf70130e949206ce6fb112323f525bb6e1e01028fc62d3e4ec8290b892201720bbc923ad0f

Download Submit
/data/user/0/com.zzxg.embg.venw/app_mjf/dz.jar
Filesize
248KB

MD5
a54a18b58c6720991c021f433dfb2a46

SHA1
d2ffa07919f92b6e04914e39843f08fdb2a75b68

SHA256
3dd88e4418bd4271af728fc6436c873a55e6b6f5c8ed241ee2cb0ee24fe3f7f3

SHA512
e4a51b2462b247b1e5fbd947d06a2eba334f18398daadacbabcb4185f4255f05c22d656a8837a6088ffbdcaedfbdfbd8281c5dad4880c4e5021571e3fefc88cc

Download Submit