f41e693b43ed9228ef2759113a55c6b109c54bcb26ceea5ec3b13aecf238f39a

Analysis

max time kernel
7s
max time network
132s
platform
android_x64
resource
android-33-x64-arm64-20240611.1-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240611.1-enlocale:en-usos:android-13-x64system
submitted
16/06/2024, 23:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
b5b0d0e83101268cacbbf4da5018910d_JaffaCakes118.apk
Size 29.4MB
Sample240616-28ca3sxbkn
SHA256 f41e693b43ed9228ef2759113a55c6b109c54bcb26ceea5ec3b13aecf238f39a
MD5 b5b0d0e83101268cacbbf4da5018910d
SHA1 92c403e35f77ad4972373a28365d4375815d3e59
SHA512 5723dca7ba4c635c1148294bb33b84e0057527c1ed3d113ff37a256ff4644036e93011cc2a48be10706de16e585be8a5d9e38bd8f14dff199b8b6d5cd602b185
SSDEEP 786432:DTVdg/IU60dZhQf1H7zBc5HA2tW4UO1sjYsAZ4Cv9YQYz:1dKLaR7zBcNA2g7csAZ4Ce9
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

evasion

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 1 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.polyv.vclass

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.polyv.vclass

com.polyv.vclass
1⤵
- Checks if the Android device is rooted.
- Checks memory information
PID:4336

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1004

Path /data/user/0/com.polyv.vclass/app_crashrecord/1004
Size 220B
SHA256 a908f179b901c158796406ffa9bc5054ae46b8f311c6c45abcd4d72f33c1db88
MD5 2ff3402daeb7c2f2d80e146bb3f29d89
SHA1 8cee2a41882ff762ede8c9ba5b8d0efba9444428
SHA512 a10c8042722550122693d5be02796357081bc3e1d01170a4e002156768f9903ddb3308c0742f0d15f04e1d56f67d317b7da805eae4478cd79b148f0bd4ca19c0
MD5 SHA1 SHA512

Submit Download

1004

Path /data/user/0/com.polyv.vclass/app_crashrecord/1004
Size 58B
SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
MD5 0d210bfb2a0e1f1b4c082a6a0f79de07
SHA1 bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA512 536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1
MD5 SHA1 SHA512

Submit Download

bugly_db_

Path /data/user/0/com.polyv.vclass/databases/bugly_db_
Size 52KB
SHA256 77cf1f93cf3859f8fc3725e662d6e1c3357f1d85784ebca9410f3d2014153465
MD5 a6d02e1a9c536b283c135a611f1278c3
SHA1 eea70a0ba2f0d7aa4b166cbd995174ce532310b4
SHA512 f3efacc6731f85d63375ac8f8fdc83f9e0cb1b09b1106f62e5c5ef2eb61bfc5fbffddbf465ac02494123768264d9e014118afd65d34ac68d0a5773ea55c65199
SSDEEP 48:T+u85WuAriStwwuMN5meposSm4nEHesZlTl/2CifK:253AzwujJQ3fK
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_-journal

Path /data/user/0/com.polyv.vclass/databases/bugly_db_-journal
Size 512B
SHA256 e66f0ee39fd8cbe1ec1677037ce32edb4f7cd288bd515ff4ccf7111951edb5b1
MD5 383db8405789affc11b9ebc89bae8b1c
SHA1 7a93d41755370a30643cafa6b0a19f08a01ad7a8
SHA512 875b21feeac1b13e11f5b4cfda2e7701bcffd85a977676ae8dc5af51b663a85350246694b881d4f7d04e955cfb8a0ff222f4c2d6027c528603bfcc5462faeddb
MD5 SHA1 SHA512

Submit Download

bugly_db_-journal

Path /data/user/0/com.polyv.vclass/databases/bugly_db_-journal
Size 8KB
SHA256 0ad0bac64fb778798a1327471618ffbf454af7f170bcb8bee1ecb7b75c9c891f
MD5 849c1771136eb48bd0e20b3d19279ead
SHA1 e75b1106a8a594b6ad5faf7111e81ff176722482
SHA512 481437d3865f9063a64074c910cc22a811195b8ff0a2da1e689f2630c5f81f47ba3a1b866e73bbf2787d528ee3b524f8727eaf7c60dcb9eb484744b72db531b4
SSDEEP 6:7+/l9X4n1Xg9bNFlEuWdOAlOERX4PBX4ogLugMBX4suuKw:7+tRCqLiuWd7RmBEyPbD
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_-journal

Path /data/user/0/com.polyv.vclass/databases/bugly_db_-journal
Size 8KB
SHA256 b9d5c124451bb369ede6d2143609c01dd440e32638f8784a45dc55c916b668d4
MD5 405c6afed14a5aea65bd10fc2b2d5375
SHA1 2154c7d874503a362b732e084ca1ece809f17aa5
SHA512 8ef81802024c1c4468f291b562587f1dee4006e8f568c89feef74c0c0f6f0211e0e938ca8fd84b1e45d4fba2174bb5b3f937541c2de9a7d6d63a7c26f9fd3256
SSDEEP 6:7+/l9YCOPg9bNFlLdKEAlOERX4PBX4ogLugMBX4suuKo0//9n:7+tPiqLJdKBRmBEyPb69n
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_-journal

Path /data/user/0/com.polyv.vclass/databases/bugly_db_-journal
Size 8KB
SHA256 d5dadc57bd0f4ee7c2731af04a5eb29fe344904b24a375a263c203e7d90dd8b7
MD5 0b708b1aa639d131f15095395df47322
SHA1 e7ac228fe91c240288bea82275b587942ad2b6f3
SHA512 1f380e8f357822428821b3f22731ac74734f3b0889a58df72a0b9752ef2e1516e62e11e0126c7b937e3e7baea2e9bf96a10f156ddf77e49b1893ab9ec78ce71b
SSDEEP 24:7+tTqLLQKBq5JQfs6y2nriS3dVi6fXX+McEnKwm/mpLwBpGSJ:7MTqZ85WuAriStwwuMN5meposSJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_-journal

Path /data/user/0/com.polyv.vclass/databases/bugly_db_-journal
Size 8KB
SHA256 31eecbece1802d2bf4cc4964cb8deeb710dd036ea638e9cf27413f5747144599
MD5 c2cfc92ae24d690357aca9b8addad9aa
SHA1 318d2f5abd5bff3d2421140ac94da8c20b2d8a97
SHA512 c70115d49e69894817789e9434615686b2e862525da054a953abd3817ef3cca306342ed3ef0e093c240945ae246ae0ea3aed0794012829a1ec24c031ac74d2bd
SSDEEP 48:7MDX2CifKkhnqJ85WuAriStwwuMN5meposS2:7V3fKkVP53Azw2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads