00207fe7b7b9f08d6db522de16d3389b5e62947849572fc7341359c879fc1c7b

Analysis

max time kernel
7s
max time network
133s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
21-09-2024 18:08

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f05bcf30367ab9829fda4d2961afdced_JaffaCakes118.apk
Size

14.2MB
MD5

f05bcf30367ab9829fda4d2961afdced
SHA1

ea44de626b0d80235ab160cf162bf10b04ead4e4
SHA256

00207fe7b7b9f08d6db522de16d3389b5e62947849572fc7341359c879fc1c7b
SHA512

0c8066c6edeff0c1349c79c7c21bd9455830076d57b0b4813a1daa49b4b8119a0f342df491d106b030fdbde9eb1eafbfff6518447d846c545701754f043446a3
SSDEEP

393216:iFJqHytU0V/Fa5uVTTI8iO3NFF7sYX4PpzEPqH:izqHy1/bXI8RDAEA

Score

7^/10

banker discovery persistence

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.watcherr.game.patapon

com.watcherr.game.patapon
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4250

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.watcherr.game.patapon/cache/temp_dt.apk

Filesize
2.0MB

MD5
3862a974eef6f3c01fc58b85dec4e6ea

SHA1
8a482f68e74c8b406b5dc87f7f6e46f348e1a673

SHA256
912d30f69f69a2e36a4cb0a13a25832c4ce4deb31470275273104f778ffb9bb1

SHA512
1701259d85b6b8a5841d6761ce54f4ff432fe8cf7d7f51b16212a06b58cbdcf48414fecdd10ab5347e6b59e879fbf896bc1f3c1b9c602444868b94f23e4ba7e8

Download Submit