3600a40dd6785ef850bcb4ec662ca675c9423721f70ac30f24fa4a09962d4e09

Analysis

max time kernel
93s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
25/07/2024, 18:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
70cc64627feacd0929d4867c2eb340fb_JaffaCakes118.apk
Size 6.1MB
Sample240725-xfbfvs1dmf
SHA256 3600a40dd6785ef850bcb4ec662ca675c9423721f70ac30f24fa4a09962d4e09
MD5 70cc64627feacd0929d4867c2eb340fb
SHA1 3e336e2d0c803b009f5add955aadc50e8143ad56
SHA512 33fa7164936d855a9ebdf865dac79275387bf026a0c512db875fa70bd6ccf97c371bc249780b0e19ec37c2323ee0f4bda8446dbfdbe8161761d8516c1b111007
SSDEEP 49152:oBPybb/swRDAuvS9nm0FLvm2GdslxCI7GQPWnrG9yFZsG3+a4xbxUHqHOJxZu5Q+:4OvU8CmAL9PxurGMqULBYCJbVDBSd9
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

discovery evasion persistence stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs

stealth trojan evasion

Suppress Application Icon

T1628.001

pid	Process
4260	blutbad.fishing_place

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	blutbad.fishing_place

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	blutbad.fishing_place

blutbad.fishing_place
1⤵
- Removes its main activity from the application launcher
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4260

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

.YFlurrySenderIndex.info.AnalyticsData_GP4KF9VBMCPFGFRK4HMD_182

Path /data/data/blutbad.fishing_place/files/.YFlurrySenderIndex.info.AnalyticsData_GP4KF9VBMCPFGFRK4HMD_182
Size 88B
SHA256 8a34caefe463f7121918514385de417e360064533f1df095ed04ed960f06521a
MD5 a500608caa4c314ca8eae63b48c437b9
SHA1 778136f91b25ed8f03c93e3ac145218316b439d6
SHA512 c55cf76132827dcbbb0cf5d45d89001cf03fd158c54788bfc27dee9705500da8b2b51094ee62253548c527240ab05b9d3522bf4e82688fce21b5a9369dc9fdda
MD5 SHA1 SHA512

Submit Download

.YFlurrySenderIndex.info.AnalyticsMain

Path /data/data/blutbad.fishing_place/files/.YFlurrySenderIndex.info.AnalyticsMain
Size 72B
SHA256 404fcd9d2a42e5ac4037495c72ea89547d98faa962b81d07e29cd0eb3f634152
MD5 34685056092fb8e0cc08cb63041631d2
SHA1 a734e30b799da1308227e86937fea9b9ec151707
SHA512 53616663b9edee5d3faec684ee37a833cd5df277bf93c17be069a8a94884871219146d031f985b47a1da18ad94c2c312ef3dc752bb20d8a44af91633a2c2b97b
MD5 SHA1 SHA512

Submit Download

.flurryagent.210f95ee

Path /data/data/blutbad.fishing_place/files/.flurryagent.210f95ee
Size 58B
SHA256 6e0f29c5de237a0c51457122e30e7d08b700aa86e727c6b5127cf66ba13e74f4
MD5 ceb6860c024a2df31919cfa006633617
SHA1 ce8fa266861b3935e17ddf770067485a9238b816
SHA512 b7a95fdab41f6f22c5e2c1b41f57cce3db4a4123e40236ce09e8217f1e8b049933fc4febec8ed9469645889ccb59d75bbf4a018e5bbe710f45238b86c1a6420e
MD5 SHA1 SHA512

Submit Download

.yflurrydatasenderblock.2db1f141-6360-4e6a-9eb6-139bdfa41a1b

Path /data/data/blutbad.fishing_place/files/.yflurrydatasenderblock.2db1f141-6360-4e6a-9eb6-139bdfa41a1b
Size 339B
SHA256 e6720e450f9b449a0fb6a5f5707c7a861ae80cb604ec89e0cfd469a659b59ba2
MD5 1079009df0aa03630b62a3da5f50200e
SHA1 8196192cb459b636ca120f84a621391be0688fd8
SHA512 c180a3b73fa7bf487d5863d668515c066f3511eb6c7947cb3a6234e5d148f5764d58642b9daa1fdab99f9ef0f67322e6c4b1c5d8a05b3d7c1188db72745b40ea
MD5 SHA1 SHA512

Submit Download

wQYxaPvqH

Path /data/data/blutbad.fishing_place/files/wQYxaPvqH
Size 354KB
SHA256 e1230b05918d01975045b19fd63be40e56cf6836ec91ceceaa43bdc54a616c15
MD5 33c4e3c640c58340b5a46671f98954ed
SHA1 2b80da0c33a1a59ee2815a6d68d91e6f13024dc2
SHA512 d37484d42bc57c8ae2685d510966e247e147a0ad83bb79cd9bce40196ad13dd41a7a6d487ffe06a4fbd244145ac51f612f610f8a193a8170bc379f3d0b9ea78a
SSDEEP 6144:IKut4jmdTcEgQT9FUWT+OyN3WYKRnTPObNonc9HQBx+4mWzutKkHGqcmhAwHwDZT:DwhmKzwQSQ69RGF/uvBF+p/
MD5 SHA1 SHA512 SSDEEP

Submit Download

wQYxaPvqH

Path /data/data/blutbad.fishing_place/files/wQYxaPvqH
Size 631KB
SHA256 e5d7b18c0ef995b88ec6187d8dcb10008a1db263cb6bf5dfde5c29161b138fc5
MD5 3dceb1427c25c681298a04b9ea923744
SHA1 92faf758f61132c4dd9dfb6e97ab4346dc52b44b
SHA512 9cf9b11664548154176cf17a3de7997eefd283e9603eb5bd1fa110dbd779fd4f490ff192d60b7daebc04dea9d0965688d7e9cbbb9925bf7869ceedc00586a2df
SSDEEP 6144:wC1v4YmdTcEgXTWFUWpyW+N3WYKRnWPpbNonnICBx+YY1VI5ejqw5rnugdOI0VIT:ct5n4nugrTUXL0MEEsh0CD/6Zk
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads