7a433b3c20ec42c75bc38ed8c5c196090eb94f3808c949a5db1e717bf82eb59a

Analysis

max time kernel
91s
max time network
138s
platform
android_x86
resource
android-x86-arm-20240611.1-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
submitted
16/06/2024, 10:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
b30b773d5e3c0fb7138f5e6436e0aa16_JaffaCakes118.apk
Size 30.6MB
Sample240616-mk2hqszemb
SHA256 7a433b3c20ec42c75bc38ed8c5c196090eb94f3808c949a5db1e717bf82eb59a
MD5 b30b773d5e3c0fb7138f5e6436e0aa16
SHA1 ec8bff3ae2b97dbb4e13c6b7fa29b2954abfdb6a
SHA512 5181cce8df2be9bd4e3c9cfb976d20a0038e280a9f63a4b6b2e6a65b21356da8b43dfae2373e877ca5ba5eae49ddedfc1d7aa10ca66706d77b99aefcb95bfb4e
SSDEEP 786432:yf4fUt1VMvBD1flNQRqNghnEBj0OCsstmLsjA85tGPbyKD:yf4fUVMvR1fLoEAsWcuA2GPbVD
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	eu.bandainamcoent.pacman256

eu.bandainamcoent.pacman256
1⤵
- Checks CPU information
PID:4172

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

7723box_pjz.apk

Path /storage/emulated/0/7723box_pjz.apk
Size 3.3MB
SHA256 07d5827ef21744d399bf1888c198a3715235c887c0abc82cba3545b9864c3837
MD5 2dbfa511a770cb9923d85b15a9841848
SHA1 7618c9af34437781884bec561d12ed2a0781e56a
SHA512 fa718fde2af8f491407c927550410eb5eb6a40dc4df144507bd63b285ab7e8b630db85d11da5572b5ecb5b88ed38cc1cdc0d2fa7007717c17ac67ac859ac24be
SSDEEP 98304:V3XuuHwWUJrVwUOLuAXaK2Koz8sdw428SlZLx9pvY:hx0rVwUqqK5Iw42vTLx9VY
MD5 SHA1 SHA512 SSDEEP

Submit Download