1cf61a68589f1025d86186df79a932f18ef5077031226c4345207d172de46aa4

Analysis

max time kernel
3s
max time network
128s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
09-09-2024 14:51

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d68ae14c91997ba03f21e29ed7dc2ca8_JaffaCakes118.apk
Size

30.4MB
MD5

d68ae14c91997ba03f21e29ed7dc2ca8
SHA1

9088fd2aebcd1b797f290fd47035fbb02d4561f7
SHA256

1cf61a68589f1025d86186df79a932f18ef5077031226c4345207d172de46aa4
SHA512

7bd3c122a238271bc9a18bde55c16a3273ed754cd4bb970fc24d308d8691f64445c99e77bb4430f8fef98c1a82a4a2cf8450b66a00aa13d3155e087788bcabce
SSDEEP

786432:0O5XyY11siMJNCaF0YBWLJ/9FuLR8QZlUFcdBYAvTJHk7rJOOo:RfjkbCgBwToR7gGrbMrJOOo

Score

4^/10

persistence

Malware Config

Signatures

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	game.color.ballz.block.brick.puzzle.free.physics.balls.adp

game.color.ballz.block.brick.puzzle.free.physics.balls.adp
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4239

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/game.color.ballz.block.brick.puzzle.free.physics.balls.adp/databases/bugly_db_legu

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/game.color.ballz.block.brick.puzzle.free.physics.balls.adp/databases/bugly_db_legu-journal

Filesize
512B

MD5
fe525e1c8481beceac8277cc07b020be

SHA1
49bcd2333cbb39dd0d8497f449a2d3fddf0245a8

SHA256
ebcf7ec9a8be2efec01d62b7679ff924eb7add304e9447ad1d408bffba97454b

SHA512
b053637a07059955fb566817bafd6704b759cb79c0b063c791172784cead3922561851c52eb9c5bc1382d7da3f9d464cac20477b52e5e8ee2607ce7d0c75ecb1

Download Submit
/data/data/game.color.ballz.block.brick.puzzle.free.physics.balls.adp/databases/bugly_db_legu-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/game.color.ballz.block.brick.puzzle.free.physics.balls.adp/databases/bugly_db_legu-wal

Filesize
92KB

MD5
c4276f84396ffac88ba1b52417a86edf

SHA1
f875edfcbc6f66155addecf54a5431026bae7545

SHA256
c89098faf8908ccdc8add57ec331e897ee9479ce06e142077048ccc0ef88cff7

SHA512
7b1721c926c42510dc464be9fe335c90d4b592b59db4827df1e52dbaebdafe4dbdc50d1f91af686b3fa8a24ced1eca8f331ef386f5edd6df0735ee09cbdbdd17

Download Submit