42cab9ed3a3489aceb14bd7322784560c2f48f01817fc6c4fea1839a99fbcb6b

Analysis

max time kernel
30s
max time network
160s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
25/08/2024, 23:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
c1cf21119eca74e5b46ece90ab8ec47b_JaffaCakes118.apk
Size 1.3MB
Sample240825-3dnw3ashmk
SHA256 42cab9ed3a3489aceb14bd7322784560c2f48f01817fc6c4fea1839a99fbcb6b
MD5 c1cf21119eca74e5b46ece90ab8ec47b
SHA1 b8167f0dc5aa3196b535bddd63643402229c8912
SHA512 fb47af4670d7192f0dbae23adde30a9232ed06538c62c8b6423c2ef955e4138459678ded0c16f0340624dea5b02b84ffcdc1eb3fa004b82b41efbba270dea67a
SSDEEP 24576:ktcEoL0otaYtXM7SprkM4FqD5Bl0ZHqU+JjPo+SkjWByq/13tdHbZKm51Ob83Y:vQ7Yt9rkruBl0ZHUjzbjWByq/1XHNKmA
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

banker discovery evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 3 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.dabv.vetu.tvbf/app_mjf/dz.jar	4961	com.dabv.vetu.tvbf
/data/user/0/com.dabv.vetu.tvbf/app_mjf/dz.jar	5016	com.dabv.vetu.tvbf:daemon
/data/user/0/com.dabv.vetu.tvbf/app_mjf/dz.jar	6041	com.dabv.vetu.tvbf:daemon

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.dabv.vetu.tvbf

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.dabv.vetu.tvbf

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.dabv.vetu.tvbf
1⤵
- Loads dropped Dex/Jar
- Queries information about active data network
- Queries information about the current Wi-Fi connection
PID:4961

com.dabv.vetu.tvbf:daemon
1⤵
- Loads dropped Dex/Jar
PID:5016

com.dabv.vetu.tvbf:daemon
1⤵
- Loads dropped Dex/Jar
PID:6041

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

ddz.jar

Path /data/data/com.dabv.vetu.tvbf/app_mjf/ddz.jar
Size 105KB
SHA256 1ed0751a141b17c80a921f5e8ba90c66a56b8e73156f5cbe133b57d550ca4ef2
MD5 23ba0b249042b7ba33e92c0199b0ea4a
SHA1 99b13ee9f7307316c2337953fceed87e9942b794
SHA512 0cc88e2b7c2ffa4db274d690e3bf12098ec804b9fcd9e92b57d2fa0c4161031d2e84c91d86ba8e2b6e8b4837852defa099333f76bcd454c67b31632d0cdd4861
SSDEEP 3072:ZFp3P/dHnYTPgW7hvtnKo719YDQXgQeRY3dn:Z7/NZW75tnKtggXRYtn
MD5 SHA1 SHA512 SSDEEP

Submit Download

tdz.jar

Path /data/data/com.dabv.vetu.tvbf/app_mjf/tdz.jar
Size 105KB
SHA256 8d86de68978e859c8262c0d0e932d3a1d57457b57ce88940620befab1bcead5b
MD5 293ea5f01e27975bed5179ba79d80eac
SHA1 c5b0806a537fd1cb753e11f1a9684933317716b8
SHA512 c7cd2881367fdf95ec4151449b359decdae1adf136388edbaaa9880c7ebd14fb3579e7a15600a856988c55d207f7ba1fd7d938f4d9168aba8a7ff1c3029d6b53
SSDEEP 3072:tTcL+dZox99byIJeYF3OFotaKIMBtaEjgebMwO:tTcL+dZoVyIJeY0FotaKIUtaEj7bMZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

lezzd

Path /data/data/com.dabv.vetu.tvbf/databases/lezzd
Size 28KB
SHA256 56cf91ca198812e0ef9ba4af0e96c08a32e24c917bcf2250bdebdfd7fd6f5286
MD5 dae68dcffc3d522a79f98ebbc3b6d457
SHA1 6df5dce9a50f12044a2d20b8d1742ae47b82ee03
SHA512 23b76f988399e9c9e4f5a7e8d19ecb765abdb115b0beee35f8ca9d221bbc5ee79f0152fac4261cc91eb9e7f874b5c6e9bff2dbb1812d31412d506cf83c16adcd
SSDEEP 24:TLL0kSBieszXtUku+haaL6nwyLGSiGQQ:TkkS0FXtUkthaTwnS
MD5 SHA1 SHA512 SSDEEP

Submit Download

lezzd-journal

Path /data/data/com.dabv.vetu.tvbf/databases/lezzd-journal
Size 8KB
SHA256 6743d3f61544923367e54fe98990958a73f6d7fc65ce8cbc3fc84bf745461a76
MD5 004ad9de69269806163e53dd0300be6a
SHA1 878287d2fa1e989b3392b9c438ffe19783a42416
SHA512 8acafccd67de91913654762fdcf227c3daba1d4b3da46bdd203396611a0eaaafac27fe24d93a2eca439dd27d51d7c280aa02d2618ff14cb8b41fc79e89f31baa
SSDEEP 12:7+tYFqLWeOqQADYf3F6Dx9XHNTSFbyiVyu+ALCy9aFbh6WMwvrWp1mFRmBEyPbfx:7+tAqLGqteszXtUku+haaL6nwyLGSfx
MD5 SHA1 SHA512 SSDEEP

Submit Download

lezzd-journal

Path /data/data/com.dabv.vetu.tvbf/databases/lezzd-journal
Size 512B
SHA256 c082f27352999e80c719a4f5bbf1186662d104038caf81ae21f997ef4544c3a9
MD5 3a603cd63631b296848d3830e8d0cf3a
SHA1 a2146afb4f16c1b015b887842d75e5b1a57d35e7
SHA512 1fb0b903e226888bd3dd63a585d03ad66c4bf084f19883a793a99aa06e9afe19a859293c14e46e921d172184f856763b3b8c3178aacdd56d37cb5f36c302888f
MD5 SHA1 SHA512

Submit Download

lezzd-journal

Path /data/data/com.dabv.vetu.tvbf/databases/lezzd-journal
Size 8KB
SHA256 ef348fc256b5747c38dcc40c62f3c4e30298bca6b60749bc40ae59c4127b9d39
MD5 be696b8b1c1b378843294428578a655f
SHA1 8b3de45dfe5bbf33cdd0f9c7843cb257de64df38
SHA512 101a27f9c61341d9be005c92ae7e7f0c19885b36299799b6d86f1d756fdcd56ad716a55180bbdcc541bf8bbd344001c01219fd37bf1bee2564d0d06384d5859a
SSDEEP 6:7+/l9i/gn16/vg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK/:7+tk/bnqLiuWdwRmBEyPbk
MD5 SHA1 SHA512 SSDEEP

Submit Download

lezzd-journal

Path /data/data/com.dabv.vetu.tvbf/databases/lezzd-journal
Size 4KB
SHA256 13386f9652298f42f2dc9d666eecc0fc60411a8e4af6688a84f80e71e0427f2c
MD5 b9ffa6ab37c48e2e7ef2d99f6740d7e5
SHA1 1fd94ed93a0437908f2e3bfa279ec9e5a1b5b780
SHA512 8971c64663ea19c9f37c51a27c721ca1ebcce1a02cc8c1e885aba35e22215b91c9b83dc3b48c7605e41aaa5ba86883c8edad5447bacf21ecbdb0eb355e441ac4
SSDEEP 6:7+/lP9Pg9bNFlLdrlOERX4PBX4ogLugMBX4suuKC:7+tPZqLJdTRmBEyPb1
MD5 SHA1 SHA512 SSDEEP

Submit Download

lezzd-journal

Path /data/data/com.dabv.vetu.tvbf/databases/lezzd-journal
Size 8KB
SHA256 2c7a69c074aa56afd0f8e82a23b9900393024309eb53a3550016e1f671c51081
MD5 7a015d2d9a282c53452f8b1e36d8c473
SHA1 8bf00e103708854b6b1542a5a86c85995dde5a90
SHA512 636b360a39c51452733df1bdd578a3734f5079000e5566e284463198eeda5a2b22b48ef2eb5a45e347a705e135aeb5abec5d5060631071e6adcd1c1cf1d5d564
SSDEEP 6:7+/l9wPg9bNFlqhO1IlOERX4PBX4ogLugMBX4suuKsU/l3:7+tSqLmqCRmBEyPbCt
MD5 SHA1 SHA512 SSDEEP

Submit Download

lezzd-journal

Path /data/data/com.dabv.vetu.tvbf/databases/lezzd-journal
Size 8KB
SHA256 bcce5c092226dc99f732f5fd1a257c44a1dd2ddb956114b86e2666b754fcb46b
MD5 aacfcfdfd62f452d67045e765e34b243
SHA1 5ae0d2322c24e48d87db5438f41b9c89046c07cc
SHA512 a3f9ecd316a154c147f771369b735b8a4f41d0b61464b1b6e6add0077f57091a7714040fec5a5da43bed1fa6ab53ab90dd5b521d03ebef111f2101cc8a90e1cd
SSDEEP 12:7+tKnqLyKE4SyNTSFbyiVyu+ALCy9aFbh6WMwvrWp1mFRmBEyPbaAX:7+tOqLy9yUku+haaL6nwyLGS9
MD5 SHA1 SHA512 SSDEEP

Submit Download

dz.jar

Path /data/user/0/com.dabv.vetu.tvbf/app_mjf/dz.jar
Size 248KB
SHA256 3dd88e4418bd4271af728fc6436c873a55e6b6f5c8ed241ee2cb0ee24fe3f7f3
MD5 a54a18b58c6720991c021f433dfb2a46
SHA1 d2ffa07919f92b6e04914e39843f08fdb2a75b68
SHA512 e4a51b2462b247b1e5fbd947d06a2eba334f18398daadacbabcb4185f4255f05c22d656a8837a6088ffbdcaedfbdfbd8281c5dad4880c4e5021571e3fefc88cc
SSDEEP 3072:No4SBiL5O8+ZfL6xc/5ktKuniJDrbEaXqgXoL1E9h+N9w5E4y9sZ4tefH6Tvc2t:KmFOR6xcRkYqaXqEoL1y5EcH8ft
MD5 SHA1 SHA512 SSDEEP

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads