78a23fbbedc42c604593626ee1bafb4aa81a20c6cd19fa368531b437bb354045

Analysis

max time kernel
3s
max time network
138s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
03/10/2024, 02:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0d8223466f1c05ef3399f98e92f13f10_JaffaCakes118.apk
Size

29.2MB
MD5

0d8223466f1c05ef3399f98e92f13f10
SHA1

95010d27a0e709f348dda9195e61090522c3c300
SHA256

78a23fbbedc42c604593626ee1bafb4aa81a20c6cd19fa368531b437bb354045
SHA512

c2db957ebdd34de0e326bb9fdee933a4ef9497497698346b5be051db7636c72dcd2983f3dd98794cc55d9d3a4f1ea159172a63ba9a47da69cdd28795153775fb
SSDEEP

786432:rW39t1/gyNlSK9PxNS6E4jNkMugmOwknDwk05FtVTzkcNM:it1o+//NNE4jNkRgfXnEkYzE

Score

7^/10

evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.doraemon.doraemonRepairShop/files/dlibs/libs.apk	4293	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.doraemon.doraemonRepairShop/files/dlibs/libs.apk --output-vdex-fd=44 --oat-fd=45 --oat-location=/data/user/0/com.doraemon.doraemonRepairShop/files/dlibs/oat/x86/libs.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.doraemon.doraemonRepairShop/files/dlibs/libs.apk	4259	com.doraemon.doraemonRepairShop

com.doraemon.doraemonRepairShop
1⤵
- Loads dropped Dex/Jar
PID:4259
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.doraemon.doraemonRepairShop/files/dlibs/libs.apk --output-vdex-fd=44 --oat-fd=45 --oat-location=/data/user/0/com.doraemon.doraemonRepairShop/files/dlibs/oat/x86/libs.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4293

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.doraemon.doraemonRepairShop/files/d_data_store.dat

Filesize
7KB

MD5
8388ebbf3d2313f0dc20a9ea42a551e6

SHA1
1bcbc6ef2e942baa2a7064df17a766ccb7e5bc46

SHA256
543327811984009040da0cf68ad7cf5fbbe10201b49e4c851649898d3d46f893

SHA512
0b6465c31e05f020e1c6ada213ffb823018fc3b9079d62f643172ccdae2dd30d0e03ac226249adfd6495e076be12b7d672534b2bbe48463f289b55f179fe5ba1

Download Submit
/data/data/com.doraemon.doraemonRepairShop/files/dlibs/libs.apk

Filesize
30KB

MD5
bf03f0ae3921181ea53ca7f34e1a7e47

SHA1
859b0c1ad5c6428d993da2ec98d0b6c6f297a41d

SHA256
fdac245dbf8ea880a55fa0099e72606df936950f11c0ac1a5b8ac05440f69ac1

SHA512
7e14115385805b5ce6aa802a9c9d541b28a18a58d4935644369a00bcf9cb1dd10eae63cdc5741d5ccf302ee36b2e1bb4c76724c37ca86f6cab46dbaef7e8282b

Download Submit
/data/data/com.doraemon.doraemonRepairShop/files/iridver.dat

Filesize
8B

MD5
4d2b32c39bcd0bbccf90c2f12e892ff9

SHA1
766bdb09b28b3c8f46401fa40d720abd48d80a98

SHA256
48f4abca31f97b103e440af341d2b358185884234d63f08a5cfd0180dde825ff

SHA512
ec72ef73f1e9e78e6a45038e055469c914f5ba6f9482969462dae16add05ef71e670206a62a62b8125c7dbbdeb7130d171eca6c0ea2b2c277734e689510efdf7

Download Submit
/data/data/com.doraemon.doraemonRepairShop/files/libmegbpp_02.02.13_01.so

Filesize
571KB

MD5
190cd7923a90f56360d54faa3f491748

SHA1
4fa3559dca7843ef9e106079871af5275cdba882

SHA256
5487244f4993a819f1f541b75b01c0bb45d5e706600300f164e365ddd633cad7

SHA512
50be3846133901e166b093aa3c96beba0e82e63336a306f55fd93103a8adbddcb9541706d54d400e218dbb9c1920acb76595412651cc6a278c95ba6c20ac3f0b

Download Submit
/data/user/0/com.doraemon.doraemonRepairShop/files/dlibs/libs.apk

Filesize
79KB

MD5
40844acb7922718d971fdc360ceda3b1

SHA1
5e7ad7a9d80f30bc3be122bad4d43147a3bc9627

SHA256
b3f2c96967bf6c5b19a25985e95c0b53d29cd5f4c6f28357ddfae1f186fa1c75

SHA512
cb45e5565c523ed0ae7a0bc4d060ed0590ae51e73cc08678ba691647bdfc16651ad6ed11c02ce2c06f3fd7864684974ece353204557fe206df540c771ce36793

Download Submit
/data/user/0/com.doraemon.doraemonRepairShop/files/dlibs/libs.apk

Filesize
79KB

MD5
dcdecb2e356ba2a40133f09c14a33e26

SHA1
46ae04a6a39d73461337fcd4c6a10dd83c50f7b2

SHA256
ee0ffd36a57fd2152561d5162b1d5ffc55afe6893ea3148ae2ac85b817602157

SHA512
3558bd6acd2f9915e1857767093b6548e2892dac69189d16d39156d87533db30bfa7b16b0453fe3980d5091a7ea1a6d2d29af921fc0be1485ae58f3547ecdb13

Download Submit