ab59dacca4c6ece8264a478495ddb51dcaa8a262cbd042a0d22d7b112cdf20ba

Analysis

max time kernel
2s
max time network
129s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
26/08/2024, 03:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

c2315ea0e4fb893b62c2422c7f3e689d_JaffaCakes118.apk
Size

2.6MB
MD5

c2315ea0e4fb893b62c2422c7f3e689d
SHA1

de1c0a58bcd6a308d3c0367ffe6a2353b0796157
SHA256

ab59dacca4c6ece8264a478495ddb51dcaa8a262cbd042a0d22d7b112cdf20ba
SHA512

ffccc621dd65f8794b97b4023cf52ebe7c46d6709adc138c0009d79434a0642ade3d1a7147b5f8b10b49c2a7cd50beb98ba0f22ecb73be23639e0f0cd13ddf77
SSDEEP

49152:ul0IRxYYX308GuRHyP4x5jyfZ2dqLG60/undmDVGTu4HjO:u9R+YnfVJe4HyfYkV0EmDmu4K

Score

6^/10

impact

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.potato.oncolormeasure

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.potato.oncolormeasure

com.potato.oncolormeasure
1⤵
- Acquires the wake lock
- Uses Crypto APIs (Might try to encrypt user data)
PID:4243

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact