7ce1f44aa82ec9771593698b0415eb0e5dc5df6d3cc111f9cb50ce308eee9c1b

Analysis

max time kernel
8s
max time network
152s
platform
android_x64
resource
android-x64-20240611.1-en
resource tags

androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
submitted
18/06/2024, 11:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
bba367a7b0717a629f10afaedda34708_JaffaCakes118.apk
Size 13.4MB
Sample240618-nctcts1cpg
SHA256 7ce1f44aa82ec9771593698b0415eb0e5dc5df6d3cc111f9cb50ce308eee9c1b
MD5 bba367a7b0717a629f10afaedda34708
SHA1 fc7e107212e3a9494d5061bb1647f6ea6ef90cae
SHA512 f69919bae3eb7278aeefa99dd2d5b169842c5ab3b70d535b60fb60f600160f46dcccd99f45e76fffc8246399dd3b2239fc1f24ecec9ea84c92e83aaabb763a51
SSDEEP 393216:XG/7SFj7jDal48w2nGDoOWoU5T0PUF3rBZ:E7SF/ClJLxOWoU5TjdZ
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.gunmaker.android/files/stares/updates/sta.jar	5041	com.gunmaker.android

Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.gunmaker.android
1⤵
- Loads dropped Dex/Jar
PID:5041

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

sta.jar

Path /data/data/com.gunmaker.android/files/stares/updates/sta.jar
Size 2.1MB
SHA256 d8c32e40ba04065dd62cae8495eb47d1c251a6bc830778f80eb06ae07f04563f
MD5 7219500f857b0c418b074759ba44301e
SHA1 07f557bc3d839260caf921852618ac762fef262d
SHA512 6086cfbeb32e3ded98d89c0f0bc01fac10e6036874e1c8e0ecb41864e62b00df5a32f9a3aa7bf126f6b8f1393db48abaf94ce528cf0686a3946b139bc50c8a68
SSDEEP 49152:CzrcZzVCuS4++IpMKWnL0qRIZvwukk/icrtb+OPpGF:CzGzoB+I+dnL1RIOu9icyF
MD5 SHA1 SHA512 SSDEEP

Submit Download