a15ab26d80f8df54518e781933da8537f19f2a4722807490711380913fa83619

Analysis

max time kernel
179s
max time network
156s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
23/08/2024, 09:37

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

bb359a3e142b67e17e991a612c293c4a_JaffaCakes118.apk
Size

2.0MB
MD5

bb359a3e142b67e17e991a612c293c4a
SHA1

eda919ed5ce56a0e4d86602f17be77ea2ef7e364
SHA256

a15ab26d80f8df54518e781933da8537f19f2a4722807490711380913fa83619
SHA512

6b19346db0b925a56cf41ed4283bab56eedfddfe10c443679138aa65f89b42551adb7c4050c44082616a379b3ad191cb3fb0bcbf6bb1999ef3b55769afdbaee4
SSDEEP

49152:rd2A7z0MPsWBTjOh8yAobZhfpu6YT7BV08Q/:rFz0M1jQ8UZynPBV0n

Score

7^/10

discovery evasion persistence

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.myapp/cache/DA39A3EE5E6B4B0D3255BFEF95601890AFD80709	5065	com.myapp
/data/user/0/com.myapp/cache/DA39A3EE5E6B4B0D3255BFEF95601890AFD80709!classes2.dex	5065	com.myapp

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.myapp

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.myapp

com.myapp
1⤵
- Loads dropped Dex/Jar
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:5065

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.myapp/cache/DA39A3EE5E6B4B0D3255BFEF95601890AFD80709

Filesize
2.1MB

MD5
ec4d46c643c29ee1367bf791e701ada2

SHA1
820d491b682ef5ea4634a73fef5987d00c276150

SHA256
a1874afbe0441c906eaaebc03f9a7a647729c6e9e75a7cdb34bef7742438e0b4

SHA512
4d351ab5365bbfcb01abebf9176d6ceb21f6cb56532412485d90524ea3f39207635bae8e4382bdd37959532b672ca249b2084529c8641109a6ff1c4f5a8f36a7

Download Submit
/data/user/0/com.myapp/cache/DA39A3EE5E6B4B0D3255BFEF95601890AFD80709

Filesize
408KB

MD5
6eef034d5ac3da6c619cddfb20df2e81

SHA1
1529d69d265f50717c1bf9ae7546b2a80831588a

SHA256
930ec1fe7ff09ef6c66fda123e868d5e7989689fa17d1833e5a04716d296a6cc

SHA512
ffe20e767be04cde31942228b939788edf0c0c89138b43703b983ffd05ad32350a762bc78410aa1e9e7a59cf0b3f05112001c1254e9ac0544cd9a4d9fe641d76

Download Submit
/data/user/0/com.myapp/cache/DA39A3EE5E6B4B0D3255BFEF95601890AFD80709!classes2.dex

Filesize
4.5MB

MD5
f2bdd37bca225c125cb8cdf59e8b70d3

SHA1
8744919e45d714b2ba75ef286eb3f20795e4bb78

SHA256
9cab997e28849d98c628e9fc572ca29036b166c77d3e935ee492d565a303f5ae

SHA512
67fdc6a1466ed8953c5ed409a2b810904d8351a3279043bc48fd6cb5290ba77bb732af7cc854b73948c26241a25f7de6acd6c90a1554d18e01aa91667e089768

Download Submit
/storage/emulated/0/Google/google.id

Filesize
36B

MD5
dc2c293ea810b310c8ef5c252f8153d9

SHA1
108e50ddae01c794e5f92f58f31c4116832ef48c

SHA256
4958bae48bbfe38c03fd58859baf82e2f034ca259ff8c5c9a8cc167b6debae77

SHA512
3ff11527a1f3ca44986b45081a0d2acbdd662d0ec42784d4005531354569a5cd8d2f1f554440dde2b4f31d991132f458065607337d5bba73db92952fb1cbabf9

Download Submit