192b40c3d71e04a7698bbe4ef6a274d9cf41de2aceccf2f5ce41ae7404d87b73

Analysis

max time kernel
32s
max time network
133s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
26-11-2024 00:43

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9edc71364c80c03d102a22dc68072a37_JaffaCakes118.apk
Size

3.4MB
MD5

9edc71364c80c03d102a22dc68072a37
SHA1

6b5f0150e9e9c737a3f6ce94fcdf630a633ab666
SHA256

192b40c3d71e04a7698bbe4ef6a274d9cf41de2aceccf2f5ce41ae7404d87b73
SHA512

df6aafdb6d5074c0983c03eb0f72bfa843bdf058d4c28599f5e07bc42fc61cacd245d4d3a82654146a7a9076ddf8609effb1f0329f6ebf32144ab6e34aaddb0c
SSDEEP

98304:8hWopSUW5PXsk2arQQRCBMwEda0bKI9EC:Z5P8k2arQLBMwEw1oEC

Score

8^/10

discovery evasion

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 1 IoCs

evasion

System Information Discovery

T1426

Processes:

com.monitor.tester15

ioc	Process
/system/app/Superuser.apk	com.monitor.tester15

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

Processes:

com.monitor.tester15

ioc	pid	Process
/data/user/0/com.monitor.tester15/app_sl/dex/SLSDK.apk	4929	com.monitor.tester15

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

Processes:

com.monitor.tester15

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.monitor.tester15

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.monitor.tester15
1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Queries the mobile country code (MCC)
PID:4929

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.monitor.tester15/app_sl/dex/SLSDK.apk

Filesize
551KB

MD5
19df8a31fb37c64cc9c3a7626c1c2a4a

SHA1
caedab35ebb979278623a49121165f2cb1962e49

SHA256
24e625ee70aee9c6c2ee08a0f83ed8f529beaed7ae8d1364f55ee7e3f1bd2137

SHA512
a3214c9d5aa5565410d39571bfe3c66ea0abf551ba66260ab1590110d4de4dd100cadca23260412c54d04c42999913178fd412c5dc24992c960768e20e0e88fa

Download Submit
/data/user/0/com.monitor.tester15/app_sl/dex/SLSDK.apk

Filesize
587KB

MD5
4e92f30bfa63f7885b1c47d3e6c08c80

SHA1
47f7d0d8e225d95fc3b2d63956ab36f5822416f0

SHA256
a6fe70eb21d374eddbb1dae3addc42dbc9d9bb87950e67bb937ae4e912615404

SHA512
c88265ca70980072e92cc612721e189017d59badfff1c09ce61ba9959d74f3b4049ed3562fb111253d5773e1046296f31fa490f12a4bf0cce22e63672a4317fd

Download Submit
/storage/emulated/0/data/d.gcx

Filesize
29B

MD5
68eba31471506d02c72f9c85326a95ba

SHA1
8370ca672ab7d4ad0c693f41286d2595fd2541ec

SHA256
136d86e7ac6f30dcfd3b94d5c3f3099c15d936c61007c2d0b976a1f842a50318

SHA512
db96cb313d1f9a09dc739f41c4670114a971e56b6aa6aeebf294f8042fac1ab2bc69bf817a073927818a99db988f6c29df058012ee954b153c9238afa2eb4fc2

Download Submit