1b5875710a524b9447af6d8f398ba733fdb09d15d99844e24fca8736b92fa899

Analysis

max time kernel
10s
max time network
152s
platform
android_x86
resource
android-x86-arm-20240611.1-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
submitted
17/06/2024, 04:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
b6bb5798a60ef996c26c8b1cfed0e612_JaffaCakes118.apk
Size 31.3MB
Sample240617-ezzzfstgnc
SHA256 1b5875710a524b9447af6d8f398ba733fdb09d15d99844e24fca8736b92fa899
MD5 b6bb5798a60ef996c26c8b1cfed0e612
SHA1 55a466f202a967f7ece322071429e4b853be869b
SHA512 d5565b461175dc5e625400145555db075d997e3c2db923840516381bcd5f55b40c7e85c8d09454a15dd3926735d6747a83d6041fc57bf0f5452345a8977e0bbe
SSDEEP 786432:qQfOL64Tn+IDLfGb2zaKDGJ7uk3pZa7SF/ClJL4toMY6W+hOMVQX3C8iguR:Rkrn+wGb22KCJt5sWF/kLOEOh5qHCOuR
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.naomicsoft.avengerszombie/files/stares/updates/sta.jar	4198	com.naomicsoft.avengerszombie

Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.naomicsoft.avengerszombie
1⤵
- Loads dropped Dex/Jar
PID:4198
- getprop ro.board.platform
  2⤵
  PID:4239
- getprop ro.mediatek.platform
  2⤵
  PID:4260

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

libabcdefgh.so

Path /data/data/com.naomicsoft.avengerszombie/app_plugin_lib/libabcdefgh.so
Size 61KB
SHA256 9a712cb778e9d43f8f4ea9fa2b9f4b8cc29daf74984d04f0c938dff21c118342
MD5 042246eb7c48a8cda97de99465e6a177
SHA1 f71816c4a80fbb7b63bfd6425d98db513aecb00a
SHA512 2d201619998113c5d2990c92c28c973d557872bc4bbde153b5fca39bfe0b799ef0e9bf8c29d1304847f8e6691d55649d04c6a82fe8f03e621c9e8da50c50faa8
SSDEEP 1536:UHHNUMGO/LhgFfaKShdyjxeaQ/AykEr/8MBvvChCTrRVTMGrV:UnNUc+a7p/ztBvvChCTrRVTlrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

sta.jar

Path /data/data/com.naomicsoft.avengerszombie/files/stares/updates/sta.jar
Size 2.1MB
SHA256 50b417f6a0b261458a858d152adf728914eddcbab1bd83ec25dd5fbad416c77e
MD5 6bacfe7c44e9f86700711fb051cceea4
SHA1 6727cffa12d2f6a870f99cc3b3443a4f552f4513
SHA512 4ceb590c6a9f7ec2c6959fe5cdd0b4a1ea3720134761aad47d6046d646af5a040510cf738ce540569ab25b83a4e79d1dff24376a78855641cbc01511b4a0ecd8
SSDEEP 49152:gLrcZzVCuSfl9L1RoYfIpVWoTqK9cW8sQtwSmhM7+WRSdlc:gLGzoN9L1RBfIuoThKswmhHQS7c
MD5 SHA1 SHA512 SSDEEP

Submit Download

sta.jar

Path /data/user/0/com.naomicsoft.avengerszombie/files/stares/updates/sta.jar
Size 3.4MB
SHA256 823daf16a687590a35df3cefffc28f1596fa90ebec1d8841523efa0244e0332e
MD5 209b7bb34757e67e872b45e8876eefaf
SHA1 311f6fe57d290494ca8cb142f82793ad88ad467e
SHA512 73d1d989426dc4aa3c7e04a83afd19100f69aa331401190a69cca6cc069151058bb50290e7db8d9865901d387449fb079e790545eebf4afb2f876ea309ea2ed0
SSDEEP 24576:lHF9M8zlebCU+IbLWy6+XBRs+ASdZG2gF15Qzm4ExQLTUNzzr5d3D5JmnR8pf66:dM8zlebSRYTspSUaz2QENr51ws
MD5 SHA1 SHA512 SSDEEP

Download

.systemid

Path /storage/emulated/0/data/.systemid
Size 36B
SHA256 b16d7e51fe077a4a1353f573cca51eb4061732987c0384eca4c1770905b37a29
MD5 def4dcfd8984460e34f498053e1f4f0a
SHA1 363c6521ec5f49b4b5cbf01905d2fd9c955414c5
SHA512 abc6dcd5d1afff2fe20a2452c41cfca87b1ae89caa001c62b8c953be3cf5289bf00ac82c73a6685ee821c6a90ad0cdbf3fab2119fa387019eb688cc4dd2277e2
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads