211ab458c6b70d26512b493e980a30f8bf7941b0efbf9cfa88bd8234181a2be4

Analysis

max time kernel
147s
max time network
155s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
28/10/2024, 17:49

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7a92df0b3c1ae4fe5c7dfac4ff45dc73_JaffaCakes118.apk
Size

2.8MB
MD5

7a92df0b3c1ae4fe5c7dfac4ff45dc73
SHA1

58c66d941933a6344d98b44f06c799fcfaba04c9
SHA256

211ab458c6b70d26512b493e980a30f8bf7941b0efbf9cfa88bd8234181a2be4
SHA512

bb70ff0f214c9878ab4a4805ac338c67522bbd9fd46b915add26348babf2879bce0360ce8a0684e86b289f3b8c5ca2ad8e641084402acb416e8b22d53cd356fd
SSDEEP

49152:h2OqoX3fa4mohnEjv5Wvfe7ghtQrHN6ROpECHfroGzq:h2OqOtmohniWv274QrHouHfroGm

Score

6^/10

evasion persistence

Malware Config

Signatures

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

evasion persistence

Foreground Persistence

T1541

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	com.ru.binance

com.ru.binance
1⤵
- Makes use of the framework's foreground persistence service
PID:5062

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Foreground Persistence

T1541

Privilege Escalation

Defense Evasion

Foreground Persistence

T1541

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.ru.binance/databases/androidx.work.workdb

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.ru.binance/databases/androidx.work.workdb-journal

Filesize
512B

MD5
45cb17aecbdea515e35577ff4fc7f626

SHA1
9b92b061eb1e22e4e1d7d15dcc0f2d5fc67d2723

SHA256
232833c7d55907c854e756a0cf09922251a8ccbaa91c95294eb4125df8426b72

SHA512
72417157a9b51672e92ad90641bd822635df4767ba3b90f5e88f2120f03c053d783d91a77f50f7f1244eb4d08ed02a56df98830aba9de8bad7721ebb42448549

Download Submit
/data/data/com.ru.binance/databases/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.ru.binance/databases/androidx.work.workdb-wal

Filesize
16KB

MD5
8560105501639acd8683eee8f702a12d

SHA1
a485db84eae74a623f0691e9b7d1ab93f262a974

SHA256
987059cfd58e4a623d1cef516b11dfc03de6d5f7933cb7ea61a3333cda7fc0d2

SHA512
f8446b8bb9856161c096eafbd79c2897e1ed7df6a03a4546d00b8788d6c6e7d88924f9d122d017ceb50314b2e67688df2a724469f0f774be40ac881989c166db

Download Submit
/data/data/com.ru.binance/databases/androidx.work.workdb-wal

Filesize
88KB

MD5
c651c12830dbfb51ca5abeb943241fb6

SHA1
ebac5d850cb6981baeb0e2a9e92441e2b4acd456

SHA256
1089f69bcbb469e910524b3d739cf83911bf40c7a92da7fc8d80b5ec324c2812

SHA512
96576759ac19de146cb413059b4408494a7f85e1e5c80f98e56834c58fce8e96fb85cdeae3fa545883f5767ed20c813b8ae5c23506441d6ad4da74eaff0236f1

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads