998a08e2b3ec687d37630742e3efa899efaa5541700d06969644a2a98c9dd499

Analysis

max time kernel
14s
max time network
147s
platform
android_x64
resource
android-x64-20240611.1-en
resource tags

androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
submitted
16/06/2024, 22:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
b59f88d7ddf265693b43b486825ddd70_JaffaCakes118.apk
Size 3.8MB
Sample240616-2ydfdswfmk
SHA256 998a08e2b3ec687d37630742e3efa899efaa5541700d06969644a2a98c9dd499
MD5 b59f88d7ddf265693b43b486825ddd70
SHA1 417de4b89fa966106803dcd66505ed8bc1a158ea
SHA512 c62c0820e9f66787729479cee94309fbc4811192ef2aa4e390ecd43ffbef5d7cf59b1d9d42b5d895723f176e22251c2166aa645d7875a5971e6bfdb26ae076e0
SSDEEP 98304:P+cjxLDH5AqByjpX7McsFo9asvUs8e99y9V9hiRcQ2pyoW:P+cZDH5AOgUYasl8e/s3Tpy/
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

discovery evasion impact

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/bin/su	com.tencent.benchmark
/system/xbin/su	com.tencent.benchmark

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.tencent.benchmark

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.tencent.benchmark

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.tencent.benchmark

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.tencent.benchmark

com.tencent.benchmark
1⤵
- Checks if the Android device is rooted.
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
PID:5178

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

eup_db

Path /data/data/com.tencent.benchmark/databases/eup_db
Size 16KB
SHA256 0f6762aae3d5061c1ffafeb49a8f6a488e3159a03b8fb60eea95db5218184ba9
MD5 6ecf54bc4306c3547004bf292e0ab5fc
SHA1 9562f8b38d2a0ba9e016521b2124d92346afe46d
SHA512 6647f66ef64efffcdda81ad1cfb4b1e628ed7e6b6205032465c3a36022499ef9c11474119557729c7185465ad2851dc62636d669c27f5439d817f06f28ccd777
SSDEEP 6:l9bNFlqalLTqkORugLuCvzFVvsRzBB8zxERX4PBX4ogLugMBX4suuK0DqiOw:TLpLTqSCTvC9BwaRmBEyPbBvOw
MD5 SHA1 SHA512 SSDEEP

Submit Download

eup_db

Path /data/data/com.tencent.benchmark/databases/eup_db
Size 20KB
SHA256 4171936f75304d9c085a80dc50841523d1945af92b7909b3006f1439de4fb668
MD5 e9b64ca59983fa4d9b3633672db14c5d
SHA1 376ee377ac9365521042ccbc55c4329495fef1c3
SHA512 927cdc24207446185bd40b332125186a0aa2717862a6cbc00ace2d012be4d58497cd738848e5cd85adc78c60264a67fe8b7ed33949ffc4fafb9b720e567bc08d
SSDEEP 48:Tee02TChSyc828hXsrLJFJh2FHFj3Qpw1CM15sQa7aUHmj9pvc2wDQE2IA25uJ23:702Nj828hIJzAp9w3tbmAF4lU
MD5 SHA1 SHA512 SSDEEP

Submit Download

eup_db-journal

Path /data/data/com.tencent.benchmark/databases/eup_db-journal
Size 512B
SHA256 b872a5cb86d9d0ae858a42392f390d43dbd6d4215ecaf911b36cdeeeda9dac2b
MD5 d492788046bbb616ba9393d448796881
SHA1 4d77f2fffc7376be59e16287d2cf18d22a93eaab
SHA512 5cc8845c44a327e421f24a0d9ad4a22b89764983a43ba9680968ec3d9b00a1edccfce0da8bdfe29338957430ab2e54f931605499380ce62dcd214b2ab6d7c164
MD5 SHA1 SHA512

Submit Download

eup_db-journal

Path /data/data/com.tencent.benchmark/databases/eup_db-journal
Size 8KB
SHA256 4feef95af1ef93d7e3d29fa14f1139ab185207060f85f4809022f49b70d5661d
MD5 834269797582a0b670ddffdef0319afd
SHA1 917efb09b4203e37c5c9f9f6e2cad0372e2fd859
SHA512 ffc09d419831b504f4b464d9f748d4f7f00d1fc855d4e072a93775f45dcc55b0c0026414aa2bad1c2dfef9f01d4f911cfd4c4eb54d4f2d2e7145118f1e051b29
SSDEEP 6:7+/l91Sgn1M/vg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKh:7+t4qLiuWdwRmBEyPbW
MD5 SHA1 SHA512 SSDEEP

Submit Download

eup_db-journal

Path /data/data/com.tencent.benchmark/databases/eup_db-journal
Size 8KB
SHA256 6eef162f04657608bc86c016549b4e394c2e4d2ba8e3040d7253707d27417353
MD5 acac6d56c93e8e2f67f50e609a0d38b5
SHA1 ecfcc87aaa42d780a6e868a9e6edff78d2491d82
SHA512 61b8b910e573d8e20707c4004fb7ec00b8276725df4978e65011d5d36d224c0777af8eeb53b0afd40a322d36e957acac408e3bbbb38918936ef2841fa2250db0
SSDEEP 6:7+/l9COPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKtU/6n:7+t3qLJdTRmBEyPbp6
MD5 SHA1 SHA512 SSDEEP

Submit Download

eup_db-journal

Path /data/data/com.tencent.benchmark/databases/eup_db-journal
Size 12KB
SHA256 d03367f04d4a5f930d821adff34dd6b1afc80bcd858a8e0ccc795cece4363081
MD5 5c1113c1c341cd1ed08411275086e758
SHA1 0d6880ba7074fc0da9f5b0f5ff4eb7eeaca050ed
SHA512 8aa94453f9f8e2fbd64dd14fcfe3210b777b8998ee175093d5fe4ab47041081e7e4e4e021dc4c1295b007400948343f59c2b67358d1b753cc7944179871f89ea
SSDEEP 6:7g9bNFlqalLTqkORugLuCvzFVvsRzBB8zxERX4PBX4ogLugMBX4suuKmM/6mV:7qLpLTqSCTvC9BwaRmBEyPbXnC
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads