Analysis
-
max time kernel
144s -
max time network
154s -
platform
android_x64 -
resource
android-x64-20240221-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system -
submitted
19-04-2024 11:06
Static task
static1
Behavioral task
behavioral1
Sample
fa29edf3ef05b8bb157f29a018278207_JaffaCakes118.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
fa29edf3ef05b8bb157f29a018278207_JaffaCakes118.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
fa29edf3ef05b8bb157f29a018278207_JaffaCakes118.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
fa29edf3ef05b8bb157f29a018278207_JaffaCakes118.apk
-
Size
96KB
-
MD5
fa29edf3ef05b8bb157f29a018278207
-
SHA1
ba1a43f6f0a5cac154734a153616ffaff7946d2b
-
SHA256
ecb2f0dad0543560056f71b0fe6fa734fb015e8e465f3ee932aa47d7243d6f0c
-
SHA512
d4d7b6fdc9969eddee5849f7c30b5e73860364e7bfc3ded88f3eb709ae0c729a13676bbf4d4b91f6f577f02fb8e6bff734bf59b362dfdc4165912f43faa71a2c
-
SSDEEP
1536:msr9hCnuywiTxTzmOySw/cxkdQD4H51SVGdpIvmH7l4lWJpAWFHXfgkMWsEh7:msrcxevRds4HOcHJ4lGHX3N5
Malware Config
Signatures
-
Requests cell location 1 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
Processes:
lyy.mytestdescription ioc process Framework service call com.android.internal.telephony.ITelephony.getCellLocation lyy.mytest -
Queries the phone number (MSISDN for GSM devices) 1 TTPs
-
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Reads information about phone network operator. 1 TTPs
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/lyy.mytest/files/E2FDAA28C7344D2F9FAA4A0FEC1296AAFilesize
118B
MD5a114e1a2281a6ea80dc19b722fb1d124
SHA1cfff571062d506bdb333c0a0e267d1844883eeab
SHA2568d4d14a246d72cc49f9600ddbd9c37e7e399bf0baeba390fa73708ae318541ae
SHA512da41b2b39e37ef522dd68baeb591938816d8578a2ecb863e95f906e8d40f79ab0c374cac30cbba84436acebb38ff7e416a7d7dd087a3354a48b6e594b7baf1cb
-
/data/data/lyy.mytest/files/E2FDAA28C7344D2F9FAA4A0FEC1296AAFilesize
118B
MD50c681be9591709b8133b98476c42f1cf
SHA14202eebfd68f91d080fe05e58f8c3fbe67644685
SHA25651b3bf397fbadbc40338dfc1d7587942e2d1d224d5d7f9e5fa2ba1476891cc9f
SHA5120b600961fbbc2699e4a56093b57c08c5b3f3b1c06037e64d8a455ef7860a1bb0a798c6be4931c1d6cdf798efa8940dc4a9fadcd39df782dd26a55dec0fc864f3
-
/data/data/lyy.mytest/files/E2FDAA28C7344D2F9FAA4A0FEC1296AAFilesize
118B
MD5f074d65c7585cc893e7247d985fbf822
SHA171b271c161e75a66c37223dba97c4c2a53a330b5
SHA25682bd4106bbaff4fa365588ae295cca8a53a4a4e3f8d2ff2141ebf23e3e4abaa6
SHA512e18753c72b9a695d78c1986e2bf1f771e740f75e35d8c73ceb349bc50f636e1523eb6ce9f81347130887e5e1bfc2a68495546696359f465e80834a801ee47976
-
/data/data/lyy.mytest/files/E2FDAA28C7344D2F9FAA4A0FEC1296AAFilesize
118B
MD5d4a07327aa4f96a107fe44e017100321
SHA10c70fec2ae68897265aface7ad0ad338229b5ac7
SHA2564084a3b47955d8bd6cb75c50825cf6a7c45a57e55836d42b686dc5b3f6649a99
SHA5125d7eb9e9647855e36a9eeb6618778701a1cff47f255c8e6a072356a02d6c572e8fe99a286413a80b99c07d389d58c1357d3f5f6a1185d4f8a1e11dbabbcf1e68
-
/data/data/lyy.mytest/files/E2FDAA28C7344D2F9FAA4A0FEC1296AAFilesize
118B
MD51fbd92faca75914bc06d0695d4e20ea1
SHA1aff8924f2034ead821c996f1fd384ed1b146f1c2
SHA256f8e54fdb4ad09d06c7508ee88af5ef9e7e07f2bbb559ba21cba87c7295479cb0
SHA5123685143152f12fd99d10240b9c140d9cec827745a62c745ab9edfc23facd7e61068ba9da4cfca55e7e989fd982a149859c2ffc0ce221c8d9c66a978255e3b7c5
-
/data/data/lyy.mytest/files/E2FDAA28C7344D2F9FAA4A0FEC1296AAFilesize
118B
MD59fa5500c403582686ce4c085cbb41bbe
SHA1b71a0e7d543e645894d44944562b2649c085636b
SHA25669a61e1c159b6c8ed4f03e002036a64abf895d2f09a90ff2b414f8291a8385a1
SHA512e5c22994c95e2760b905fc13a9b8c8de8f67dc3db9918f60cce5032eabf28ae3fcf26331e859f85f36f4bc30c4eaaab11b6b01149bd89eb11333c8ce5cae238c