dc471468cddbdb4498b08cf2ca506fdbe6d25e05a7510d96d011423056bd6ee8

Analysis

max time kernel
12s
max time network
156s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
20/10/2024, 04:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
6059bbc98c5de60b7e52d813a7f9258c_JaffaCakes118.apk
Size 283KB
Sample241020-e22wts1dpj
SHA256 dc471468cddbdb4498b08cf2ca506fdbe6d25e05a7510d96d011423056bd6ee8
MD5 6059bbc98c5de60b7e52d813a7f9258c
SHA1 0981daa3f3448969520700a7490a94d31408e678
SHA512 039b6bf5b4c61d048017768474e64c016a724a37a9c7e2e434278075bbb0098fe1f80b4c30b64b3825cbd4b117a66721e47008936a31f0e69ac762694cc0e0d7
SSDEEP 6144:b2uqE5NZboRQ7zk9hTX7SofRtguaI2v+lMn6a+C29OCweUb:b29I8Q3u5Z5tgvWlMn6Ttt4
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

collection discovery evasion stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs

stealth trojan evasion

Suppress Application Icon

T1628.001

pid	Process
4941	com.zxfxxx660.sucruri

Reads the contacts stored on the device. 1 TTPs 1 IoCs

collection

Contact List

T1636.003

description	ioc	Process
URI accessed for read	content://com.android.contacts/contacts	com.zxfxxx660.sucruri

Reads the content of SMS inbox messages. 1 TTPs 1 IoCs

collection

SMS Messages

T1636.004

description	ioc	Process
URI accessed for read	content://sms/inbox	com.zxfxxx660.sucruri

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.zxfxxx660.sucruri
1⤵
- Removes its main activity from the application launcher
- Reads the contacts stored on the device.
- Reads the content of SMS inbox messages.
PID:4941

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

Credential Access

Discovery

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Protected User Data

T1636

Contact List

T1636.003

SMS Messages

T1636.004

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads