53472d59d23f5ab2bf1468c2ee3cbc90c8db79edb26ca349a9efe01ff2092ffd

Analysis

max time kernel
132s
max time network
130s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
18-10-2024 10:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

56d3daa52b4f64b360edcbf78fdd8cf4_JaffaCakes118.apk
Size

435KB
MD5

56d3daa52b4f64b360edcbf78fdd8cf4
SHA1

33aee00154c8515af38d727cb459f923e49c2e7f
SHA256

53472d59d23f5ab2bf1468c2ee3cbc90c8db79edb26ca349a9efe01ff2092ffd
SHA512

1116f464a65b754f3daff8e1b0e408a952ffffc3145e208725923d7425c90e10adee00e614efafd017605e8969b1fa088310f54a8618d3932532acfbe60f17b5
SSDEEP

12288:6uc1L7ZUjwxbVRfV06UW8f75QfBHqJvecQ2Epu1s4ewnA:657ZUjs66r8f75Qpu3wpuij

Score

7^/10

banker discovery persistence

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.picodaku.zncbmac

com.picodaku.zncbmac
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4249

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/storage/emulated/0/.mydata/tmp/12-6470/101-pic-20131120-2dfbc3059ec142b8bd5b75a209041226-5099769-58927-jpeg-424-600.0

Filesize
57KB

MD5
923daa4fee821ca0fd840f2d1df7978d

SHA1
9e2a392a8faf2088400f8ae58fef3e1e18c2d38d

SHA256
2676408034e6ad977104a64b711074856961941f213a481bab7ae521668ca1cd

SHA512
7f2b99abc1719fdb456efcc417c6a24f35b9f492ada0161a4249682bd39ac02045b2b4debbacb4c56e9e2824d107e426c75518422df335fa52fc9283dd6fee54

Download Submit