5ea2c4d06edf83c95baae020e52e29e7f61408644a61b03b0062944d0ca0f881

Analysis

max time kernel
21s
max time network
129s
platform
android_x64
resource
android-x64-20240611.1-en
resource tags

androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
submitted
17-06-2024 10:40

Target

b8312c8dfa6bd99dfcd8692092b407d5_JaffaCakes118.apk
Size

2.0MB
MD5

b8312c8dfa6bd99dfcd8692092b407d5
SHA1

5a4608afa038a4aa97831f486716c80ca75c0abd
SHA256

5ea2c4d06edf83c95baae020e52e29e7f61408644a61b03b0062944d0ca0f881
SHA512

574054e0bfbbc7ca34b7ea0b6bfe300a400928cde5029838fce2d8d68fc648ac997a1016591670592d0653b5794127492130659484f647834450a1ff784d41d4
SSDEEP

49152:ANaTaNeFJFXkDlDJs0Oz9wcHcRdaetgPhnRZgWqkLdH21c5CLgiYSjoy:ANaaNeFJuDJs0S9wcaYeqtLvLRmc/SjZ

Score

8^/10

Removes its main activity from the application launcher 1 TTPs 1 IoCs
stealth trojan evasion

T1628.001

Processes:

com.google.uioptimizer:remote

pid process

5158 com.google.uioptimizer:remote
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

T1422
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

T1624.001

Processes:

com.google.uioptimizer:remote

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.google.uioptimizer:remote

pid	process
5158	com.google.uioptimizer:remote

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.google.uioptimizer:remote

com.google.uioptimizer:remote
1⤵
- Removes its main activity from the application launcher
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:5158