998a08e2b3ec687d37630742e3efa899efaa5541700d06969644a2a98c9dd499

Analysis

max time kernel
14s
max time network
147s
platform
android_x64
resource
android-x64-20240611.1-en
resource tags

androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
submitted
16/06/2024, 22:59

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b59f88d7ddf265693b43b486825ddd70_JaffaCakes118.apk
Size

3.8MB
MD5

b59f88d7ddf265693b43b486825ddd70
SHA1

417de4b89fa966106803dcd66505ed8bc1a158ea
SHA256

998a08e2b3ec687d37630742e3efa899efaa5541700d06969644a2a98c9dd499
SHA512

c62c0820e9f66787729479cee94309fbc4811192ef2aa4e390ecd43ffbef5d7cf59b1d9d42b5d895723f176e22251c2166aa645d7875a5971e6bfdb26ae076e0
SSDEEP

98304:P+cjxLDH5AqByjpX7McsFo9asvUs8e99y9V9hiRcQ2pyoW:P+cZDH5AOgUYasl8e/s3Tpy/

Score

8^/10

discovery evasion impact

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/bin/su	com.tencent.benchmark
/system/xbin/su	com.tencent.benchmark

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.tencent.benchmark

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.tencent.benchmark

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.tencent.benchmark

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.tencent.benchmark

com.tencent.benchmark
1⤵
- Checks if the Android device is rooted.
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
PID:5178

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.tencent.benchmark/databases/eup_db

Filesize
16KB

MD5
6ecf54bc4306c3547004bf292e0ab5fc

SHA1
9562f8b38d2a0ba9e016521b2124d92346afe46d

SHA256
0f6762aae3d5061c1ffafeb49a8f6a488e3159a03b8fb60eea95db5218184ba9

SHA512
6647f66ef64efffcdda81ad1cfb4b1e628ed7e6b6205032465c3a36022499ef9c11474119557729c7185465ad2851dc62636d669c27f5439d817f06f28ccd777

Download Submit
/data/data/com.tencent.benchmark/databases/eup_db

Filesize
20KB

MD5
e9b64ca59983fa4d9b3633672db14c5d

SHA1
376ee377ac9365521042ccbc55c4329495fef1c3

SHA256
4171936f75304d9c085a80dc50841523d1945af92b7909b3006f1439de4fb668

SHA512
927cdc24207446185bd40b332125186a0aa2717862a6cbc00ace2d012be4d58497cd738848e5cd85adc78c60264a67fe8b7ed33949ffc4fafb9b720e567bc08d

Download Submit
/data/data/com.tencent.benchmark/databases/eup_db-journal

Filesize
512B

MD5
d492788046bbb616ba9393d448796881

SHA1
4d77f2fffc7376be59e16287d2cf18d22a93eaab

SHA256
b872a5cb86d9d0ae858a42392f390d43dbd6d4215ecaf911b36cdeeeda9dac2b

SHA512
5cc8845c44a327e421f24a0d9ad4a22b89764983a43ba9680968ec3d9b00a1edccfce0da8bdfe29338957430ab2e54f931605499380ce62dcd214b2ab6d7c164

Download Submit
/data/data/com.tencent.benchmark/databases/eup_db-journal

Filesize
8KB

MD5
834269797582a0b670ddffdef0319afd

SHA1
917efb09b4203e37c5c9f9f6e2cad0372e2fd859

SHA256
4feef95af1ef93d7e3d29fa14f1139ab185207060f85f4809022f49b70d5661d

SHA512
ffc09d419831b504f4b464d9f748d4f7f00d1fc855d4e072a93775f45dcc55b0c0026414aa2bad1c2dfef9f01d4f911cfd4c4eb54d4f2d2e7145118f1e051b29

Download Submit
/data/data/com.tencent.benchmark/databases/eup_db-journal

Filesize
8KB

MD5
acac6d56c93e8e2f67f50e609a0d38b5

SHA1
ecfcc87aaa42d780a6e868a9e6edff78d2491d82

SHA256
6eef162f04657608bc86c016549b4e394c2e4d2ba8e3040d7253707d27417353

SHA512
61b8b910e573d8e20707c4004fb7ec00b8276725df4978e65011d5d36d224c0777af8eeb53b0afd40a322d36e957acac408e3bbbb38918936ef2841fa2250db0

Download Submit
/data/data/com.tencent.benchmark/databases/eup_db-journal

Filesize
12KB

MD5
5c1113c1c341cd1ed08411275086e758

SHA1
0d6880ba7074fc0da9f5b0f5ff4eb7eeaca050ed

SHA256
d03367f04d4a5f930d821adff34dd6b1afc80bcd858a8e0ccc795cece4363081

SHA512
8aa94453f9f8e2fbd64dd14fcfe3210b777b8998ee175093d5fe4ab47041081e7e4e4e021dc4c1295b007400948343f59c2b67358d1b753cc7944179871f89ea

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads