b6d88c1b604301462d0eeaa97ca9a114b61e1d66eecb60636906ccf90644446c

Submit
Reports

Overview

overview

Static

static

DroidJack....at.apk

android-9-x86

DroidJack....at.apk

android-10-x64

DroidJack....at.apk

android-11-x64

aapt

macos-10.15-amd64

aapt.exe

windows7-x64

aapt.exe

windows10-2004-x64

DroidJack....ol.jar

windows7-x64

DroidJack....ol.jar

windows10-2004-x64

DroidJack....fm.jar

windows7-x64

DroidJack....fm.jar

windows10-2004-x64

DroidJack....pk.jar

windows7-x64

DroidJack....pk.jar

windows10-2004-x64

DroidJack.....6.jar

windows7-x64

DroidJack.....6.jar

windows10-2004-x64

DroidJack.....4.jar

windows7-x64

DroidJack.....4.jar

windows10-2004-x64

DroidJack.....2.jar

windows7-x64

DroidJack.....2.jar

windows10-2004-x64

DroidJack.....1.jar

windows7-x64

DroidJack.....1.jar

windows10-2004-x64

DroidJack.....5.jar

windows7-x64

DroidJack.....5.jar

windows10-2004-x64

DroidJack.....5.jar

windows7-x64

DroidJack.....5.jar

windows10-2004-x64

DroidJack.....5.jar

windows7-x64

DroidJack.....5.jar

windows10-2004-x64

DroidJack.....4.jar

windows7-x64

DroidJack.....4.jar

windows10-2004-x64

DroidJack.....5.jar

windows7-x64

DroidJack.....5.jar

windows10-2004-x64

DroidJack.....4.jar

windows7-x64

DroidJack.....4.jar

windows10-2004-x64

Analysis

max time kernel
82s
max time network
152s
platform
macos-10.15_amd64
resource
macos-20240711.1-en
resource tags

arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
21/09/2024, 09:03

Sharing

Copy URL

Twitter E-mail

Static task

static1

sandrorat

3 signatures

Behavioral task

behavioral1

Sample

DroidJack.4.4.Cracked.2.02.2016/DroidJack/Apktool/SandroRat.apk

Resource

android-x86-arm-20240624-en

android-9-x86

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

DroidJack.4.4.Cracked.2.02.2016/DroidJack/Apktool/SandroRat.apk

Resource

android-x64-20240624-en

android-10-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

DroidJack.4.4.Cracked.2.02.2016/DroidJack/Apktool/SandroRat.apk

Resource

android-x64-arm64-20240910-en

android-11-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

aapt

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

aapt.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

aapt.exe

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

DroidJack.4.4.Cracked.2.02.2016/DroidJack/Apktool/apktool.jar

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

DroidJack.4.4.Cracked.2.02.2016/DroidJack/Apktool/apktool.jar

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

DroidJack.4.4.Cracked.2.02.2016/DroidJack/Apktool/efm.jar

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

DroidJack.4.4.Cracked.2.02.2016/DroidJack/Apktool/efm.jar

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

DroidJack.4.4.Cracked.2.02.2016/DroidJack/Apktool/signapk.jar

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

DroidJack.4.4.Cracked.2.02.2016/DroidJack/Apktool/signapk.jar

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/commons-codec-1.6.jar

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/commons-codec-1.6.jar

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/commons-io-2.4.jar

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/commons-io-2.4.jar

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/commons-lang3-3.3.2.jar

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/commons-lang3-3.3.2.jar

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/commons-logging-1.1.1.jar

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/commons-logging-1.1.1.jar

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/fluent-hc-4.2.5.jar

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/fluent-hc-4.2.5.jar

Resource

win10v2004-20240910-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/httpclient-4.2.5.jar

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/httpclient-4.2.5.jar

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/httpclient-cache-4.2.5.jar

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/httpclient-cache-4.2.5.jar

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/httpcore-4.2.4.jar

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/httpcore-4.2.4.jar

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/httpmime-4.2.5.jar

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/httpmime-4.2.5.jar

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/jaad-0.8.4.jar

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

DroidJack.4.4.Cracked.2.02.2016/DroidJack/DroidJack_lib/jaad-0.8.4.jar

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

aapt
Size

1.1MB
MD5

908811c1fbcc200d01c885e0385dc79a
SHA1

1911c290fb52d2fe821ebec5cec5450735fa58ec
SHA256

4b0b43987b479c242f40c91bca06a0e7b08dc0af3ce51490b3149cf6b0be9612
SHA512

76e56e543e7e0944f97f83f7b70368972f84cd732484b3ba1f9d67e61cba1a50b0775c49e34c0c9946ab81a828c6f24cd009e5b20d6d2add13dd07dd2edbeb62
SSDEEP

24576:xHinq2NVyW/ZH+EbKZBKUq6HGnVgXEM9Vk13yqGV:xHiq2NVflEZIUq6HGnVOq3eV

Score

1^/10

Malware Config

Signatures

Processes

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/aapt\""
1⤵
PID:484

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/aapt\""
1⤵
PID:484

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/aapt
1⤵
PID:484
- /bin/zsh
  /bin/zsh -c /Users/run/aapt
  2⤵
  PID:485
- /Users/run/aapt
  /Users/run/aapt
  2⤵
  PID:485

/bin/launchctl
/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon
1⤵
PID:510

/bin/launchctl
/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon
1⤵
PID:511

/usr/libexec/xpcproxy
xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
1⤵
PID:520

/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
1⤵
PID:520

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads