45403a1e3cb3d6c37fe117b66ccf52d70d6d0207cef913104381c16d5eca57d4 | Triage

Analysis

max time kernel
6s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
18/08/2024, 06:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

a5c8c575045349d2a857cef68a422953_JaffaCakes118.apk
Size

15.6MB
MD5

a5c8c575045349d2a857cef68a422953
SHA1

582890009abb045c7975a7de4024c4d8c2ffe739
SHA256

45403a1e3cb3d6c37fe117b66ccf52d70d6d0207cef913104381c16d5eca57d4
SHA512

83e29eb808ba6b308abed669cc171eeee6c680bea7aed1637b0737e008480aec9f039d6e1b4af6ef80946fa00687dc9fcd9b7003af6e7e18fa9623860527a222
SSDEEP

196608:N45tSJNQw5LoErlVCgJFncC5wszQdea5OGWhI/0j0Lypk2:GLSJNQu+IhFaAhv0Wpk2

Score

4^/10

persistence

Malware Config

Signatures

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

Broadcast Receivers

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	net.talktosomeone

Checks CPU information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/cpuinfo	net.talktosomeone

net.talktosomeone
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
PID:4258

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads