Analysis

  • max time kernel
    2s
  • max time network
    129s
  • platform
    android_x86
  • resource
    android-x86-arm-20240221-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
  • submitted
    19/04/2024, 13:03

General

  • Target

    fa5a40dc16bd752cfbcd0eedcee5992e_JaffaCakes118.apk

  • Size

    8.4MB

  • MD5

    fa5a40dc16bd752cfbcd0eedcee5992e

  • SHA1

    67f629516ef4fcbe2c80c35c53e5ae6baef16e37

  • SHA256

    027b366910c1ed5311518152a5b96051fc09de041e6a32bb97c4992f6a37e835

  • SHA512

    5f8682cade2eb96bfd9f9e8e59060406782b19f4fcc60ef9f64f7d1fd0a310288475734901596178dd932c4653c6c2c542ed425a97c87f8420ba0e481363af2d

  • SSDEEP

    196608:639G1khA+odtcRgS/nLnTfU8PCzaddV68xkHn65:6Y1/+otUgwn7TfRCzaddY8xkHn65

Score
7/10

Malware Config

Signatures

  • Queries information about running processes on the device. 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current Wi-Fi connection. 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.zhupei.zhupei
    1⤵
    • Queries information about running processes on the device.
    • Queries information about the current Wi-Fi connection.
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4310

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads