55ee4235bbc07eabbce3dad2b950ca49f00e39be0fe430cd6a7ba1af72241754

Analysis

max time kernel
143s
max time network
156s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
05/10/2024, 03:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

16072e69efe5466e4f4537e2039c5960_JaffaCakes118.apk
Size

378KB
MD5

16072e69efe5466e4f4537e2039c5960
SHA1

75a2a392a4dbc9eecf679f74ab4cbcd0cbad75db
SHA256

55ee4235bbc07eabbce3dad2b950ca49f00e39be0fe430cd6a7ba1af72241754
SHA512

6e3b51d50b557952cf1b88f516ac2479b6023aeb518544a769fd638bc2d8d8e8a76fdfd3ac057d8630646fb6e45855c4455b7df8dbb3c68072b8250f804b727d
SSDEEP

6144:w1alIf9rFq9IknzA2NwoRmsT6uAto7YVoEcl2s+XdCcPBS:wElIrFZCpvT67y6oEcMjXdCc8

Score

8^/10

banker discovery evasion impact

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/bin/su	com.example.idiom
/system/xbin/su	com.example.idiom

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.example.idiom

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.example.idiom

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.example.idiom

com.example.idiom
1⤵
- Checks if the Android device is rooted.
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Uses Crypto APIs (Might try to encrypt user data)
PID:4955

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/storage/emulated/0/Android/data/.class/android

Filesize
33B

MD5
0f44edbc45401773c96dd5e2a39ba212

SHA1
116c913e3b6f4f77f9549426bf6e4a4d279396d5

SHA256
745fd71594e73895acc4a7b052c1c08184aa5239f3edf22c152826c49953fa28

SHA512
b9ebcb18204d3b6a6e18cf1f140eda5bf40026e893415488d5d69c7288002512955ba6d9b2811609d48e1d3352f7c58fea88188d1b47747eeb6339dbd4a3b471

Download Submit
/storage/emulated/0/Android/data/cache/AppPackage.dat

Filesize
15B

MD5
10264d4a63f514cfe52f911bb9d781af

SHA1
37a0b5bd5c2ca637a405fe4d496666fa2e700dd5

SHA256
66b4e00896fabfe8151353eae22a3816e3d56f75ddb1532a70fb80d6f20003dd

SHA512
b06a157a3ace771cf6a2802f29d03d5ccde17414052d83228a46cfe360e02a618c747299c931cc5fb62476ea8dd0892d75e3dbc4f15b49b346692c42c3e3e0a1

Download Submit
/storage/emulated/0/Android/data/cache/CacheTime.dat

Filesize
13B

MD5
7b41155b56fe11c46794b923f01f243a

SHA1
2782d561ed9d1a1d18bb74f79b2867354526bcf3

SHA256
a511afb5e8d90924a28f36e9cde9a05c3ea0edc24fc52749ca1cf6d62862e4f2

SHA512
aaccfa8933f563e667c8417ee794426337909f1fe2e9519b77a11200a7fbff4ff4f585be11faf5083a9ed441dea793bc8079ef0de969a90b5d82aa349adc635d

Download Submit
/storage/emulated/0/Android/data/cache/UnPackage.dat

Filesize
18B

MD5
b151c87860bf4db27a839677d7f9222f

SHA1
e47095803ebdcec918e3a16e65b176f87b3758e5

SHA256
abc598e606ee476bfb48141eda209d6080fc8e61281ccfc165adaea6c09c6550

SHA512
dc2c2a31dcf0c05736a48a40934db98dea4d4669a52bd3593842ff7633d7485c461bd305a8be79e3b7af24a71c40c9e94871e19beda1bec19667aaeb8eed554f

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads