2131751ed0061df58037011cdafdcf4cf909073a343f8693912495ceb1c5bfbe

Analysis

max time kernel
3s
max time network
147s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
25/09/2024, 23:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

f706873a246916ca97650ab19be7ed20_JaffaCakes118.apk
Size

271KB
MD5

f706873a246916ca97650ab19be7ed20
SHA1

bbd95384464f1fd44914bcbfd048d70cf1520a6e
SHA256

2131751ed0061df58037011cdafdcf4cf909073a343f8693912495ceb1c5bfbe
SHA512

ba533ab4fb2498141e16db22ef52397b0b9df1f8ffcfdf1670c6a55af40695d848f1f14234bbf37b9b484ff2305699e59e494f58574e00007d0b418933d3c597
SSDEEP

6144:K1x1tknFjdJFZT5h9OfT2IJr9R7VUgBj22lsX79MvCvLsNZsAKC:KRun9dpTfmr372gB62G79MavLQs6

Score

7^/10

banker discovery persistence

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.android.mlysaa.page

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.android.mlysaa.page

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.android.mlysaa.page

com.android.mlysaa.page
1⤵
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4980

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.android.mlysaa.page/databases/soft.db

Filesize
20KB

MD5
c85a471741e85cf92f18aa1a590284fe

SHA1
f2c7b74de8fa4f653a9eb120d7d68b46d9c96f8f

SHA256
17df3f4d798693c65b4235eafcd3ca82d5630b7901edf5703f88e3bf1d9532cd

SHA512
56ae2c63f82ad8733c868b275e7b15bbd7ed560619f9eab4cfbd95c6a20b82dd02833f18a86a7052130ff804fbcd33ab0eb0f3be2d7ac43eb3cbff1d83cd96ab

Download Submit
/data/data/com.android.mlysaa.page/databases/soft.db-journal

Filesize
512B

MD5
aa9f76e26506a5a7a2bc09d948b2efc7

SHA1
7cef7be58f5b3b168b434230fe41edbb89111f39

SHA256
26814bb87e8ad72612c8c96f3cfd400dea5809a2013bf39cb428ee4b37ce21aa

SHA512
2a1b6500300c161133f09a070b1b72e569f35678fd95e4d80de3f39563c97bac0cdfb296ac98823787acbaf119d25bc6dc072c311c632826dd663a664748340c

Download Submit
/data/data/com.android.mlysaa.page/databases/soft.db-journal

Filesize
8KB

MD5
cbe5e16e7b11eb148f466bf0d63361e7

SHA1
65c7669c7f7b5272189e2e6be74cd5060f1bbb20

SHA256
cbb76c231022965e7e4b7a9aef3f340d50e3024c1fef52308d629e04e6640e73

SHA512
f64d85d48a80302f2ab0ae74873d6d5a5ae20f701e456dde571ed8279f9114445312be4ee2d90f5ff5b0708275f706d8fcf32e960041b7d904c2f94881925bfd

Download Submit
/data/data/com.android.mlysaa.page/databases/soft.db-journal

Filesize
8KB

MD5
c8cee4e4a26e4d173dd05298b97c4752

SHA1
1d1fce04e149686a901a7eeea9b4ee53b0057f7c

SHA256
52ac29003c19f1341961e69cec99b0f3244246ef26263fe7b790bac26c84e0d0

SHA512
9c16c9901583363dbded55978fff77a00916060731d62b1dcb58010c341ce67f0848e4e10969c0b2d797817d7aadab53768720b4bfa2b35f06f809b11d1b94d6

Download Submit
/data/data/com.android.mlysaa.page/files/yst.db

Filesize
4B

MD5
584a15a90f2f959d0703594ad447ae93

SHA1
a40dc8ca42102b7db12aeeae5f5d91a964a588a0

SHA256
88185d128d9922e0e6bcd32b07b6c7f20f27968eab447a1d8d1cdf250f79f7d3

SHA512
c9097680d1b36d980d54a25045aa170eeb52e855754eab1c3d1d3307a6bfda6e1af738f1cbcc3e022c6023cf13692a61b84cf2170bb7eabdc717ff5be0410ecf

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads