8969a70e7ed5224b8dcfca9b420a19549e1c9acfc80996fd33062b41f060c216

Analysis

max time kernel
4s
max time network
132s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
11/09/2024, 17:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

dadac7f164c8c4d5c9104fee3434a5db_JaffaCakes118.apk
Size

7.6MB
MD5

dadac7f164c8c4d5c9104fee3434a5db
SHA1

a3dcc52853e33db7b7d633bdd86adb265c46a248
SHA256

8969a70e7ed5224b8dcfca9b420a19549e1c9acfc80996fd33062b41f060c216
SHA512

891084bd2d91a6f4aec1a56a509d4541ee177190cf1441308c0aa2d4e6eb9fcc37bb25bc7e528f6b60efba7fca9cbd340978c567138f7710fbd3bff037d32da0
SSDEEP

98304:J6W0n2xutepKOKgsqnPkjkaFpL7ElGo4NN8TvaTuZ92ajH:h0n2xFugsSPkjkyMQjH8TvaTuZoyH

Score

4^/10

impact persistence

Malware Config

Signatures

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	net.dinglisch.android.taskerm

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	net.dinglisch.android.taskerm

net.dinglisch.android.taskerm
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4251
- sh
  2⤵
  PID:4320

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Windows 7 deprecation

Loading Replay Monitor...