4eb4923b4b01514fd19531cfa0d9599a63869bca038e021a8828b1c01d2a7792

Analysis

max time kernel
4s
max time network
179s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
26/08/2024, 07:51

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

c29278bf0004fd387e86dede24e82bc7_JaffaCakes118.apk
Size

10.7MB
MD5

c29278bf0004fd387e86dede24e82bc7
SHA1

698e3d1dda62cf60b543246b9f37e2b706c8488e
SHA256

4eb4923b4b01514fd19531cfa0d9599a63869bca038e021a8828b1c01d2a7792
SHA512

46bdfa04d35d3ee994e92ddbe1c3402ca64d3022de9707eff62e0428b100f1c199df6b2757b3df61c4ed74d273fa57d72d2eb422433e25a8cccb9acdb49cb9e2
SSDEEP

196608:hVVFT5SwRNpTLEOGDaiP4RdeF6ZnAi1Z7b6TiTdglroaq/t2KId:TVFTHNpTLEOypQPe4xAOZ8iTA8aqVc

Score

7^/10

discovery persistence

Malware Config

Signatures

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.brightfuture.premium

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.brightfuture.premium

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.brightfuture.premium

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.brightfuture.premium

com.brightfuture.premium
1⤵
- Queries information about running processes on the device
- Acquires the wake lock
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4246
- chmod 777 /data/local/tmp
  2⤵
  PID:4332

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1424

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.brightfuture.premium/databases/snaptube.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.brightfuture.premium/databases/snaptube.db-journal

Filesize
512B

MD5
2341adb332fd6db8dec3fae7519bf203

SHA1
a3ba47ff9c7a364bd2d048dc4d91deb46950cd6a

SHA256
49e7b8a041f6e05fa91dee905e175f581507575ed889f86df5fdca2be4596e07

SHA512
26842e77b1c1b61aae88ad78edd44f5d07cc923f943b1b03f9258e97ddc54a4cd000f85dcbb18db806d1e05872641b8e29a6b87434ff06a1edc147b25f654a91

Download Submit
/data/data/com.brightfuture.premium/databases/snaptube.db-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/com.brightfuture.premium/databases/snaptube.db-wal

Filesize
16KB

MD5
6d0279378244d1ece8a6e9aeb9184bde

SHA1
b8ba893e216ef405d4da58789d955767d9487d2f

SHA256
2f2e313c31178e77339fb16ed1c0b930443c3d1165cfa6ac8d1cfa99184615ee

SHA512
a9c9a38c4afb3f9b9eb5937b7b8e47e2340349c8353447ca3a36c2d6452ade6aad6972295f202f8aad691d4df27f71783a23206d2eed897d67c289b46f24f6d8

Download Submit