e39fb7c8180ea2ae68582a34a3b022daa4740d9955bbb9644ab7a0c59ad612af

Analysis

max time kernel
67s
max time network
153s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
16/10/2024, 02:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
4b0aa46c38b98a67ab10882ec49d0b79_JaffaCakes118.apk
Size 6.3MB
Sample241016-c18a4ssfkl
SHA256 e39fb7c8180ea2ae68582a34a3b022daa4740d9955bbb9644ab7a0c59ad612af
MD5 4b0aa46c38b98a67ab10882ec49d0b79
SHA1 40039e81971d7949a0c2c07bb130760a50a1a5ee
SHA512 a56cb21b6dae0e71efb9698aeae0a185bebcc348f2886c61bc7b1f73e51e81bb4693edb19c6429757ccd76b37f103aaa640b1fdca25047b7bf722741f4d5c1e7
SSDEEP 196608:067NUBCLy7/2ym9MDmZaO0WjYBp+ofR7Y79fb7J7GgMO4OontxJN3Cpp5jOHBp:L5UBCtb9MDmZaO0WjYBp+of56RvxrMFP
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

banker discovery impact persistence

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.mci.smagazine

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.mci.smagazine

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.mci.smagazine

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.mci.smagazine

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.mci.smagazine

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.mci.smagazine

com.mci.smagazine
1⤵
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4984

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

smagazine.db

Path /data/data/com.mci.smagazine/databases/smagazine.db
Size 132KB
SHA256 08625d428f768dcf4cc0080e0384480f3431f2f2f674d0d211e42ad184c98a1e
MD5 c9c1986ea80c7f01be82405616e69be5
SHA1 a907bd854ae3c73917bc7b8a55cc2b9d1bd98318
SHA512 c3b46bdcfc04395452ef7c059a7e046d57bd5fe007dce216d7e0eec6987f18355e1c718e0b0e983a9b3a854cb550080709e61b565ba81fbe63ab31a9fffe519d
SSDEEP 192:5B5NnrjXnrj5anrjE+gEMEmgED3CLbuKnrjfrFvnrjBnrjTnrjjNgV1nrjr:JNHJadgECgED3CLbLPBxDW7
MD5 SHA1 SHA512 SSDEEP

Submit Download

smagazine.db-journal

Path /data/data/com.mci.smagazine/databases/smagazine.db-journal
Size 512B
SHA256 ec10d4706d5320b9c9ba1c87e23899106b188afed971c5c0c440a970c8aea453
MD5 da6cdf6e7cdb712ca42bff3f321c48dd
SHA1 f599072abd74041417af0e8f06111f882be23465
SHA512 dccb806f53c5eaed0a6dd417e8e02ae9f4158905021855777c7e6cfa6ae57461b14734b9d8e4534d56d9a98a9a511e8a175b3f01c62ce0078d70764db20dac97
MD5 SHA1 SHA512

Submit Download

smagazine.db-journal

Path /data/data/com.mci.smagazine/databases/smagazine.db-journal
Size 8KB
SHA256 10e9783437b2e3f1be6e7bf3961f9a3b3bfb508392175353ea38a01fd2d43cd3
MD5 e744006f0b08636fe3dacd3bd8bc73f0
SHA1 d4af48b50ca27d5a61b8f6ff0ba6cf03a6c02ba7
SHA512 d0f139ad98eacec00665b1418b640fd531f81673c9fd6edf37bd3637549ed2284364cf727a1789df305df803da3be527662e0c0ff95ac40eebeeb92cafa0ef62
SSDEEP 6:7+/l9TQFn1pg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKsZ:7+txaqLiuWdwRmBEyPbPZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

smagazine.db-journal

Path /data/data/com.mci.smagazine/databases/smagazine.db-journal
Size 8KB
SHA256 634a4edd120e0cc4941f8b8b492aba994939617d1ec30603cc16aada95734286
MD5 45a6cb1f6942bf812a89fa9090ab8d92
SHA1 32901daa4c732dd48c43abbdddcfcabb6f2d51d8
SHA512 9737b7c1ead96e5cbf2d36a042465e37e18dec214dd167099b59ca50b548f898350e4e1950e7d5a622fce1fd8434e07c98319f29d282e0a2a4e708aca459549e
SSDEEP 6:7+/l9yPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKv/b:7+tsqLJdTRmBEyPbgb
MD5 SHA1 SHA512 SSDEEP

Submit Download

TDtcagent.db

Path /data/data/com.mci.smagazine/files/TDtcagent.db
Size 32KB
SHA256 e42d0d51e5da78c1ef6b9667ba773624dfcab76e0acc95ccf43bb7b27ba0117c
MD5 7f340b469cdd881f33fd715e525f017d
SHA1 d8838cd42d721b02b6dbe4de2e3585b64759104f
SHA512 92d3bd721c37a3569e5e2696c281902383f60c439fc18865484eab9f97c50464b1d74bb8ba80e5bdd833e4577f0d332dac069b5a0e5b744fa893ae15521ec079
SSDEEP 24:TL6b3nxeb0TDHYB0ECWYqlBl8Uxz/gpEGSZGlnn40ct:T2TxeYTDHY8qlBaUd/gpTSC40
MD5 SHA1 SHA512 SSDEEP

Submit Download

TDtcagent.db-journal

Path /data/data/com.mci.smagazine/files/TDtcagent.db-journal
Size 8KB
SHA256 e29de92817962bd6cf74f370903398c6977eadbdb69a6fe9d91d516043329b71
MD5 4b22f97334738cab56fb16049b27b22f
SHA1 cc8ab99d7c5e7e74ff75ccc20198e21516a25f19
SHA512 433e9a2ddff2b89e9caffb60ac7cd74c0e2f283bc665c5413fc7d891df7cb133414cb7d8b36fc9f99c7b1acf20eb551928288ab94a1dba80104bdf71064e317d
SSDEEP 6:7+/l9eOn1m/pg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKAA:7+t4b/pqLiuWdwRmBEyPbnA
MD5 SHA1 SHA512 SSDEEP

Submit Download

TDtcagent.db-journal

Path /data/data/com.mci.smagazine/files/TDtcagent.db-journal
Size 4KB
SHA256 dff271d03bac0611c4c4cc34be884b04c0a31a185d58705dce0df181397cb227
MD5 2419f206810175eaf1f1c1cdba3080a5
SHA1 848faed35f3c1409f28e376f78bb133f974aa41d
SHA512 efad255e2d18c644195cac26d426496082e8ee0361dbd8c4ec59ff3db392a23c40320c6b914b3458313f9e6c3310f34ae17d50939de262ec6d1bcf959016e68d
SSDEEP 6:7+/lZc/lmlFPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKO:7+tOmlBqLJdTRmBEyPbR
MD5 SHA1 SHA512 SSDEEP

Submit Download

TDtcagent.db-journal

Path /data/data/com.mci.smagazine/files/TDtcagent.db-journal
Size 8KB
SHA256 0e1f40476df1c25cfcbf8c416833da2115714c219329591d03a851f690321e67
MD5 be1a225f8e455ca67ad8375f2bc04156
SHA1 c50a39f568daed7ac318b52544383716b2bc3c59
SHA512 64b5065a22ee49ab90b245c29d1a24bfade5834766be1995df8d6413fa5ac3295d797e53491a63a1e0bb403913d0db00134b18c844ffb02a69207dc82e6dbf30
SSDEEP 6:7+/l9PSPg9bNFlqhKtwlOERX4PBX4ogLugMBX4suuK8M/wyT:7+t8qLmVRmBEyPbrswyT
MD5 SHA1 SHA512 SSDEEP

Submit Download

TDtcagent.db-journal

Path /data/data/com.mci.smagazine/files/TDtcagent.db-journal
Size 8KB
SHA256 26f934bae0625e065f788206284eecb1d4fbc8f8576d3c4c8c205b710e49f84d
MD5 f9d39d27d89b282da11b4bf778973fbc
SHA1 738feec81adcd240d332bc658241657516cc9785
SHA512 ee48ff0bf4a6f738ded1c19ba8cdbf97978f21056a16716bc062e74ddae26d2e21ec29ed1dd94f3f9efc1b6e793f1bb66dccfea000cf0093beaf898823549b19
SSDEEP 12:7+tAtSSvnqLyxqQyNTSFby/8UxF9/gpvRmBEyPbLJ1n:7+tAgSvqLyxQl8Uxz/gpEGSL7n
MD5 SHA1 SHA512 SSDEEP

Submit Download

TDtcagent.db-journal

Path /data/data/com.mci.smagazine/files/TDtcagent.db-journal
Size 12KB
SHA256 27b2dd35107e2c34a6a18472d924e3424bb45050ad880633fd3277bfbd8525a3
MD5 2410da436d1d3ba7f5f21371a01ac117
SHA1 ecdf8c68fcd77df5628fe94ff7730c6f27874f18
SHA512 46e59ac07114484426d1cfc47964b14a5517a45e01ce6b9600e680d7d8c78d9e5f39c10b59799cc6ee02becdfc91e4541e2898785b67dd87bee894c15f8494d3
SSDEEP 24:7+tCwb8qLPC3nxeb0TDHYB0ECWYqlBl8Uxz/gpEGSt:7MCi8qjixeYTDHY8qlBaUd/gpTSt
MD5 SHA1 SHA512 SSDEEP

Submit Download

TDtcagent.db-journal

Path /data/data/com.mci.smagazine/files/TDtcagent.db-journal
Size 512B
SHA256 2fab7ee8631a54df8438dcd31fa8cfd0bafc8508061dd0d20c80cd6d2d70a237
MD5 1b2c3b4652b6353b372ec488914df23f
SHA1 0627d0f1f0c347413c0728927bedd1dd3a96ae4d
SHA512 b0b33e3c549e32467f0911e473f94db158cdbdb1fa0aaedbf201b7cfe8794dfc1cb4f8c76f3e26f94d41ba8d7e9fc996029f1df116bf4bde2946da95f82598fa
MD5 SHA1 SHA512

Submit Download

com.mci.smagazine-unknown

Path /data/data/com.mci.smagazine/files/logs/com.mci.smagazine-unknown
Size 285B
SHA256 f5804748a8d4cd3a53c7df4ee451eeeb028f81b088bb129beb0cfc92d3e35734
MD5 e0630cade2705f601babd29445e33eea
SHA1 95a62af71de98648222560ce2911f1a8d960c943
SHA512 d96c5a85772dcb91d7cbbc59ea7da540d3bc03974b36050a067dcd09e2fd1c6c1709fd4001c125bd8863023859303eeaf655ac847a12ef6809004b94fb33ad46
MD5 SHA1 SHA512

Submit Download

com.mci.smagazine-unknown

Path /data/data/com.mci.smagazine/files/logs/com.mci.smagazine-unknown
Size 285B
SHA256 aec2040ed7850b4b93d299b6d6c974ac372334f871e4e783f52b08a0a3cfff4e
MD5 fdc6b0cab7801ba200dcc86b9dd9db24
SHA1 3447606a3364bd3c699546e46a2745ce448018d2
SHA512 bb7c47a98f36f791fb25b987d6cc2f63279e0c102c042a5190dcdd396b32e233a928d4b6c2a2c7c37d1e11f798c68eee8442a157e64be0b50a73f5a1d0261d5b
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads