3f18b0639493af8fff4d330339da954516dfc98eb0bea377c4e53386eb066951

Analysis

max time kernel
175s
max time network
166s
platform
android_x64
resource
android-x64-arm64-20240611.1-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
submitted
16/06/2024, 10:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
b2ec823b3860a5da967b99f5c98ad725_JaffaCakes118.apk
Size 2.5MB
Sample240616-l4chaaygrf
SHA256 3f18b0639493af8fff4d330339da954516dfc98eb0bea377c4e53386eb066951
MD5 b2ec823b3860a5da967b99f5c98ad725
SHA1 d27d90896b3f99864fd82565bb9eb99829236df9
SHA512 45cedadd9db50096844bbf89b6f64ad243ffe7814a18254a7766f6f4d9a8c6498d31df6350942a39a6a38ec4c7095470ff31b157bc5dd5ea4c84f7381b1b62a0
SSDEEP 49152:5yvCo3JKae2MCx9eNdOt4nQtqJHSfug/e052iHK5sVl4xk:4vN3J3eHKMdOO0q1SGJxiHK5sik
MD5 SHA1 SHA512 SSDEEP

Score

4^/10

impact

Malware Config

Signatures

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.cwn.avdaRhDov

com.cwn.avdaRhDov
1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:4650

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

5ac714da7be6d534dd74c84a097f98e0

Path /storage/emulated/0/com.cwn.avdaRhDov/config/5ac714da7be6d534dd74c84a097f98e0
Size 352B
SHA256 31f991d1bef220f795bd14649c36194701122c8b586d83eb983d848d96ef45a3
MD5 5a6c8d789a9e7b66afe60d7e73ed81b8
SHA1 a6a7b3bad6cdb17260e366a550d6c90479681ddf
SHA512 415f693cbe550b235375f3f77afdb91b3b138a1c6a4e076352b3c19534501d52ee3fbf922142a47eb5380f60c85698e86c0566485533ddb19b1fb382b9889667
MD5 SHA1 SHA512

Submit Download