f4209eeb3d23d117e929ef49c102a12aabcd4a724c0355ad8ad69331d8dbc57e

Analysis

max time kernel
6s
max time network
153s
platform
android-9_x86
resource
android-x86-arm-20260325-en
resource tags

arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
submitted
09/09/2026, 22:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_ca24.apk
Size 20.5MB
Sample260909-1yzsys1fqa
SHA256 f4209eeb3d23d117e929ef49c102a12aabcd4a724c0355ad8ad69331d8dbc57e
MD5 7c9625da6ea40fecd4d0a737cf0e64bf
SHA1 f1d2d3bb6ab9d30d68bd91ff5aecc830a0a5687d
SHA512 02dd7d35beb3dbf7be3a00972d7d5433987cd93fa13e7c65678351d1085e533a56470849bc4309c7969f93d14062fc82fa868019cdcfffa0acf1fd0bb62e4e7c
SSDEEP 393216:MOyWnvB4F5XuFA82HfLyR+3qlHVwcSfWICGqpnXOs6QnKYuH9ybJGaY9pIA:MmvB4F5eFp6GR9t2cSfLxiJAYu4C9N
TLSH
T1F1273310AF9AE0D1D47B8D33DAE586BB8200AE4506D3D5871E9DFA99483FAF0C70DE45
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.bless.convince/app_food/ws.json	4297	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.bless.convince/app_food/ws.json --output-vdex-fd=41 --oat-fd=42 --oat-location=/data/user/0/com.bless.convince/app_food/oat/x86/ws.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.bless.convince/app_food/ws.json	4271	com.bless.convince

com.bless.convince
1⤵
- Loads dropped Dex/Jar
PID:4271
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.bless.convince/app_food/ws.json --output-vdex-fd=41 --oat-fd=42 --oat-location=/data/user/0/com.bless.convince/app_food/oat/x86/ws.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4297

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

ws.json

Path /data/data/com.bless.convince/app_food/ws.json
Size 932KB
SHA256 3ef8be6a6e28c34b1f16c9237e4d5a37bd7c3d508a1e9073a5e351f2f525541f
MD5 a1b733980224e1dc8c215db767a54e7a
SHA1 935288dc92b7eadd187fcaaf3bab45ee89f6db3a
SHA512 4d9ec5eeeb33129170b8fdf879e5b6805579bec36b51ff2c175eb204e271bf1abd0701686ad02231855032993a718ef287ca7f057e189bfd76f2850dee82794c
SSDEEP 12288:OIrhEKRut3zeASvM1QBBp6gEX7osQhx+hzUAgMtyNZXqbwIH2VT9Ro/rI5e9EQET:tKX2p6gEX3lUAgMt8Z6bwEcT92kEG038
TLSH
T1341533BCACAC06171DC3F516A2F77B977997D8A3C5433807912BBDB00928A74E25D81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ws.json

Path /data/data/com.bless.convince/app_food/ws.json
Size 932KB
SHA256 4f1ec9e07b258dd9dec9e4687a242880b4494998e34c768662df899a94f47988
MD5 25f9606d6d2870e00bef286b862c10c5
SHA1 cb86174faf18b621cbde9d70a66ba8c329535c65
SHA512 732146d3e132bc4e60d9bde2c612b7d0705b6b0a9fba09330b113760bc2c0cf163273b2df5d900d378b401877d06dfcbfe9a84ada87fd3b8e2c4827aac36ccf5
SSDEEP 12288:pe8iumpG/NEkL65TM7Bi22sg3FzBGfpR34SeMmrR8VsAcr/e0aX030weVB52ykjc:pk9A1g3F9Gfv46hsdrPaG3H/3gl
TLSH
T1601533A7ED03C0947AF16EA5FB7406492D20C49AEACAC6D78192F27CD43813D1CB55BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ws.json

Path /data/user/0/com.bless.convince/app_food/ws.json
Size 2.6MB
SHA256 ee065d24915cbb6771f0480ad24478603d2dc6d68fa413ebdc34c322850df983
MD5 d3d3d220b96ea5dbed7653f30ffb4121
SHA1 6fbfc146aa0162cf962fd369a26080864da81419
SHA512 e2fb847d02021e5c4e283ec6a01514e4cd1371709bc772a73340dfaf7d56935fad36e326fddbadf9362e1a18b22849fa18a12668097c36c37c8a15c287f15df6
SSDEEP 24576:PGgi0U9X+sUFVwKnI/DateX8phzG+AxAFjfZ/a6ofWvNwm1TYc0X:P2IF4/DateX8phzG+AxGZ/loyr1k
TLSH
T1F0D57E07BA165D33D22E4B70C9F7AB42A377A25A3F47C3AE2588057CFC837D11699168
MD5 SHA1 SHA512 SSDEEP TLSH

Download

ws.json

Path /data/user/0/com.bless.convince/app_food/ws.json
Size 2.6MB
SHA256 18e1413666a7a7ed815c2ed6c23976d769baef3c1087808ed61b4a63a24ced82
MD5 62ef62485a014bbaa7cc324b69b595c7
SHA1 e8e6257383f7df532535833eab8f3ac7b9664de7
SHA512 365213c309ae4459a7de3de2fe63352790b50abd43b345af992626fd4de1a7a55a0d556fb75340cc9d60a76ba4b3c95108538eea39dc8308773495c45f05878d
SSDEEP 24576:PGgi0U9X+sUFVwKnI/DateX8phzG+AxAFjU18m0ehHDsoiwm1TYc0X:P2IF4/DateX8phzG+Axgm0ehjsVr1k
TLSH
T143D59E07BA165D36D26E47B0D9F77B027377626E7F4783AD218845BCBC437E246880A8
MD5 SHA1 SHA512 SSDEEP TLSH

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads