58073207eed8241b4bf317c37850f435d9f425a0c40945dada984eca7745baa5

Analysis

max time kernel
14s
max time network
148s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
09/10/2024, 02:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

28e9cd2d7ccf12c6318b9f56f264fa7e_JaffaCakes118.apk
Size

32KB
MD5

28e9cd2d7ccf12c6318b9f56f264fa7e
SHA1

28aa04c7ea6819efff9cdc90ab4979e818d57abd
SHA256

58073207eed8241b4bf317c37850f435d9f425a0c40945dada984eca7745baa5
SHA512

beb65d5ade09e301692da310c9d0a0e9285fe77ae917360db19b2648889d3b8f505dc670bbf00d9414c8198ce62874ad6df17becec27af8a4c0307423b6d1117
SSDEEP

768:/TWTbxqaUivozxmOWS2D12Spl8rkDbpJvxPxS:/TWTbDQNmA2D158Mb/BY

Score

8^/10

discovery evasion stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs

stealth trojan evasion

Suppress Application Icon

T1628.001

pid	Process
4970	pmflwst.rnzigpi.view

Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

pmflwst.rnzigpi.view
1⤵
- Removes its main activity from the application launcher
PID:4970

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

Credential Access

Discovery

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads