4d607473083c672c5495ec503a95c46174282c798d2f5cb963316eb1ff9418f0

Analysis

max time kernel
35s
max time network
172s
platform
android_x64
resource
android-33-x64-arm64-20240611.1-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240611.1-enlocale:en-usos:android-13-x64system
submitted
17/06/2024, 00:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
b5ee4e307b862dba20034e23bd81eaaa_JaffaCakes118.apk
Size 22.1MB
Sample240617-amcaeazbkl
SHA256 4d607473083c672c5495ec503a95c46174282c798d2f5cb963316eb1ff9418f0
MD5 b5ee4e307b862dba20034e23bd81eaaa
SHA1 472bc5a6684197b16b726dc8d56c9f67d079582e
SHA512 1c24c7a200731443c2a179fdb8afe9a566cb4e161ec9fd1a6b4558a3294e025a61c896fdff20fbcf2a1d279460eca48b438eabfae3ec085574f1b81e57df72c6
SSDEEP 393216:2hJA44tYtIq0ufi4mhqhdkJzfWitMkYsNAyuSZjxf5YqUMf8SSUCAWAIqKcYgAA7:2hJXtIPKNGJLWYlYsNrJZlf5Yqvf8SSU
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

evasion

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 1 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	a160mall.com.comshopping160

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	a160mall.com.comshopping160

a160mall.com.comshopping160
1⤵
- Checks if the Android device is rooted.
- Checks memory information
PID:4243

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

bugly_db_legu

Path /data/user/0/a160mall.com.comshopping160/databases/bugly_db_legu
Size 60KB
SHA256 ef4e61db663dda3bc0c15dc1a00f7fa26a8c3e263221742f6afbd23fc3aafccc
MD5 7175b26e7314fc387fa394025e53162b
SHA1 a32c32e6fb046a0a4cd5b9979722df4d28c7c8a0
SHA512 c6c0462573c3f4006fee5dec64eb26878ffe996824895fcef501f2ea0902a2e7ed4fa0188adff76a2d5135100f7d60328647c4a1c39a316a2d55f3c6c8b60908
SSDEEP 48:T0frQiw6uMg6/YBg72meposS+aDF6E6wA6:S4m7+jnwr
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_legu-journal

Path /data/user/0/a160mall.com.comshopping160/databases/bugly_db_legu-journal
Size 12KB
SHA256 cc68b4a1191a762029e9fcbcb880685b4a02284e9412fc4878de06685acf07b5
MD5 23b9de85ee2c9aadb127fac6a99c3a11
SHA1 c122ded5480c55260c1e586976acde0ee3a696c1
SHA512 b3b3db7e04a7afe9fce87a919c13dae8d7af3c70b47c8173b5a5c8bca8b38b1ee2962b88aa96f4bbd0d06516d0ca92af6422b5662b92cf83ff0dd411a1cc9121
SSDEEP 48:7MK866b6lqNifrQiw6uMg6/YBg72meposSD:7/6Gl34m7D
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_legu-journal

Path /data/user/0/a160mall.com.comshopping160/databases/bugly_db_legu-journal
Size 512B
SHA256 288e7001376429d2fd83f68670df1a747b3768909873c302ce452e3ca4b94ae7
MD5 0ab0a1c917f4bb3c2d5a0b70dc10351a
SHA1 5243968a3341210794d14fe0691752ec68e09a82
SHA512 fe3d3d3c8b9d75dfc4efa08697806fe885d9332f9fe1b7fd6fbafe9547dc7762b246c309a44096508be48d847db3b309ef62b20d8dead51575f0543f5e175942
MD5 SHA1 SHA512

Submit Download

bugly_db_legu-journal

Path /data/user/0/a160mall.com.comshopping160/databases/bugly_db_legu-journal
Size 8KB
SHA256 a8d531e5c2dfa4f384bb50fce0fa1029e28127efef06dfc860ca93f71086d152
MD5 fd80f1d55c59bb4acd722e2c70b93874
SHA1 e242b87844562f5bfa4d3b3d14dc328c47c70381
SHA512 62e6f09276c62a440287e948f891d8d077cbd48e601c11ea1bb73dacafa7ece096b4e1d93c91e393e020c4c4da2994c82cf7b08b775bade7a3b3b69151535b22
SSDEEP 6:7+/l9kGn18g9bNFlEuWdOAlOERX4PBX4ogLugMBX4suuKt:7+tqvqLiuWd7RmBEyPbi
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_legu-journal

Path /data/user/0/a160mall.com.comshopping160/databases/bugly_db_legu-journal
Size 8KB
SHA256 40585ce93c29ad16870885db17c079e2c676b1c77c1b23c228442fe4cfe7349c
MD5 c1543f5dec35b09a6ff9a5e4d34778e1
SHA1 75bc17ef50e3270cab06c6cd724ed77e4a9bcdd4
SHA512 e2e86fee219823cda02ba7c99a99de4fdc3c1822888d30faea0af540dbcd148d1e88c77bc7f1f889eb69b502a9ab87a66bee29355f594c471c160969db2714e9
SSDEEP 6:7+/l9CPg9bNFlLdKEAlOERX4PBX4ogLugMBX4suuKgo/7:7+t0qLJdKBRmBEyPbno7
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_legu-journal

Path /data/user/0/a160mall.com.comshopping160/databases/bugly_db_legu-journal
Size 8KB
SHA256 efc5c05c44433b66e073733db8c79659143d541745e5f966e9575868f329d270
MD5 7ff508a58ea017f13558e7d3725fcbdc
SHA1 a588160f6cf371670a432e61642242dfa37b3f3c
SHA512 e35e5462a3dae8c990fc424aedab1a739cad5f5c9f453320766c3387a18f70ded69591074891c877f4e2510843554701f8a828d4ffef69d28a535cdc097c6274
SSDEEP 24:7+tJfXvqLTtcqqn26VnrQiVicXX+MgeRKkYBg72m/mpLwBpGSS:7MtfqEfrQiw6uMg6/YBg72meposSS
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_legu-journal

Path /data/user/0/a160mall.com.comshopping160/databases/bugly_db_legu-journal
Size 12KB
SHA256 2a9fa8e6c59d9d49636a65a32e82e581edc19e0ace1df41f36f7d2afb1a8e5ec
MD5 257ad50f9c2d1a88890d00d6f4a8860f
SHA1 2494b27a0241f1540f954716a5356f8a8fbf2928
SHA512 19611223e37188da5b713dcd83fec4f59b7548a6d235660927cd340ad0173e95d2a12ab4dfdf2f3958c405482ed33c1296ef1a2ba43c78641799ac4afe4b9939
SSDEEP 24:7+tOqqLMvtzqqn26VnrQiVicXX+MgeRKkYBg72m/mpLwBpGSK:7MJqUfrQiw6uMg6/YBg72meposSK
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads