b4e8b5aa7c3afee74220f66a26387e463d4a5692f30d06035af203dc482511e0

Analysis

max time kernel
123s
max time network
152s
platform
android-11_x64
resource
android-x64-arm64-20240910-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
submitted
20/10/2024, 02:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
5ffaf7f16d4f070206848c1e1bb9e255_JaffaCakes118.apk
Size 9.1MB
Sample241020-c87pjsvbjd
SHA256 b4e8b5aa7c3afee74220f66a26387e463d4a5692f30d06035af203dc482511e0
MD5 5ffaf7f16d4f070206848c1e1bb9e255
SHA1 78540749304afd037b6908edd7c8aa7f01075a45
SHA512 b796ab4e163e81bab80f96fe7961bd879fcd4c78bb2798df02d842dd8744efadf48c2582274fda1ac848aad9509411c4a51970fd4845c59a86b852fe0c2aab45
SSDEEP 196608:rr4rbF6rqRAiK5Lcu98WJ0JkdUV43ub1Ckw5nGnSpMgMAEljiTrmf:nsUAAiK5LEK0BV+uckwEniQ/lOnmf
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery

Malware Config

Signatures

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.androidbox.g31zhyxcn2y

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.androidbox.g31zhyxcn2y

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.androidbox.g31zhyxcn2y

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.androidbox.g31zhyxcn2y

com.androidbox.g31zhyxcn2y
1⤵
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Checks CPU information
PID:4774

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

activation.dat

Path /data/user/0/com.androidbox.g31zhyxcn2y/files/activation.dat
Size 1B
SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
MD5 93b885adfe0da089cdf634904fd59f71
SHA1 5ba93c9db0cff93f52b521d7420e43f6eda2784f
SHA512 b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee
MD5 SHA1 SHA512

Submit Download

mobclick_agent_cached_com.androidbox.g31zhyxcn2y

Path /data/user/0/com.androidbox.g31zhyxcn2y/files/mobclick_agent_cached_com.androidbox.g31zhyxcn2y
Size 107B
SHA256 e89845eb6bb73936e0c48c8f640c69820c8da4daf7d635d5b3216b399e2194ab
MD5 7e228a41123d19e9da3553a5866ab693
SHA1 af21d355b577cd674ccbdf31d980e82bbdecf751
SHA512 d6abfddfdbd85d56599c14b54848a744f19149ceef041b5482b352e7585e3e3eef8663057535edacbe8f0ed15dc9845c48c608e1e7e157c0f465129d4de89658
MD5 SHA1 SHA512

Submit Download

mobclick_agent_cached_com.androidbox.g31zhyxcn2y

Path /data/user/0/com.androidbox.g31zhyxcn2y/files/mobclick_agent_cached_com.androidbox.g31zhyxcn2y
Size 211B
SHA256 8e970bfb22e8dfff7e335b279ee750975311b1435d22ba594c5babdca30a819b
MD5 087dd32a9d68267ab0e3105a317c36db
SHA1 9a6b53a7b12757f830668c361fe980607eecbce1
SHA512 e954349ae3318dd2f8d2739238c8ceb314fe7ff2ee2b18609d777c4b683434d76b940409e62f6c31857612dec17850d39cf1aae9d640320c03381784c9610183
MD5 SHA1 SHA512

Submit Download

temp1536.mid

Path /data/user/0/com.androidbox.g31zhyxcn2y/files/temp1536.mid
Size 1KB
SHA256 a4411f0b0e332a1dead58cf211808df6f2c57f8f0d9ec9ed25d616bd1fd763a4
MD5 7ecc40569500c8c763604f1ed6e8e7ec
SHA1 c9d3c677e05bfc352eee98ae4505b8e96fb44ce8
SHA512 fd81930f8d45344040cf0c3743cfbb44edba89e9eee815db21071ba8a442a42015bf41065466006d39d9fd40839a4cd286f696b5c3f6106f9ddcdfc4fef90b32
MD5 SHA1 SHA512

Submit Download

temp2364.mid

Path /data/user/0/com.androidbox.g31zhyxcn2y/files/temp2364.mid
Size 2KB
SHA256 d8936a0b5476181a63b6b20467d33b150e1b16a02f2e46b327db5bdf271b154f
MD5 1ccd7296ce3fb092efd01f7d271dddf3
SHA1 da9abd49331d86d4ebd369ebb2c3694f3c168ff8
SHA512 e9b4f19ed77c0c448a25c758d3812e0d09c2c37a38eb979d9f5786f2d2db1f601452c4df98432e7c74ef72c0f3e51444e2441252e352b8ff9a9f82dec2d5aa13
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads