Analysis
-
max time kernel
2s -
max time network
129s -
platform
android_x86 -
resource
android-x86-arm-20240221-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system -
submitted
19/04/2024, 13:03
Static task
static1
Behavioral task
behavioral1
Sample
fa5a40dc16bd752cfbcd0eedcee5992e_JaffaCakes118.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
fa5a40dc16bd752cfbcd0eedcee5992e_JaffaCakes118.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
fa5a40dc16bd752cfbcd0eedcee5992e_JaffaCakes118.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
fa5a40dc16bd752cfbcd0eedcee5992e_JaffaCakes118.apk
-
Size
8.4MB
-
MD5
fa5a40dc16bd752cfbcd0eedcee5992e
-
SHA1
67f629516ef4fcbe2c80c35c53e5ae6baef16e37
-
SHA256
027b366910c1ed5311518152a5b96051fc09de041e6a32bb97c4992f6a37e835
-
SHA512
5f8682cade2eb96bfd9f9e8e59060406782b19f4fcc60ef9f64f7d1fd0a310288475734901596178dd932c4653c6c2c542ed425a97c87f8420ba0e481363af2d
-
SSDEEP
196608:639G1khA+odtcRgS/nLnTfU8PCzaddV68xkHn65:6Y1/+otUgwn7TfRCzaddY8xkHn65
Malware Config
Signatures
-
Queries information about running processes on the device. 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.zhupei.zhupei -
Queries information about the current Wi-Fi connection. 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.zhupei.zhupei -
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener com.zhupei.zhupei -
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.zhupei.zhupei