Analysis
-
max time kernel
7s -
max time network
143s -
platform
android_x86 -
resource
android-x86-arm-20240221-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system -
submitted
26-04-2024 23:57
Behavioral task
behavioral1
Sample
01f48b9f14971968f541dee3d34c07b9_JaffaCakes118.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
gp_sdk_plugin.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral3
Sample
gp_sdk_plugin.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral4
Sample
gp_sdk_plugin.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
01f48b9f14971968f541dee3d34c07b9_JaffaCakes118.apk
-
Size
22.1MB
-
MD5
01f48b9f14971968f541dee3d34c07b9
-
SHA1
db317fd638ff69296d5821422203efdb4aa81119
-
SHA256
a7512330defaefb7c72f084d0ad4630f0a81e112ece5de559a5791a1ce978bef
-
SHA512
8efb7970d6af4264ca66856e777dcde5a45950c822ab54ffc44a1bb958457e79e04e0fc3121822be1be36bbe06aa709cee4ac65862c19559fb56b43619b68ce6
-
SSDEEP
393216:EFgwuTq7RUrBfVg4OI4M15YWKC6LbxHt8fA6AaegF7q/EFyGtH/f+M:ogE7RUVfVgNKY3nxHB7E5dOM
Malware Config
Signatures
-
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.tanyu.lmys.guopan -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.tanyu.lmys.guopan -
Reads information about phone network operator. 1 TTPs
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener com.tanyu.lmys.guopan
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
458KB
MD5e3b36f82c76f157505d8b7b893525bca
SHA1d1b22a2f143d1b0267c2dad29a069db557ce3ce8
SHA256bec9a1bfbb499e8905e16b1da96f033414e244d88c6b4204d2ccb4ffea5aa370
SHA5126f4ca52a646867971d941bf46717ef2148cfca03a99670c51b61df5ae915b0c45ec9cc277c1c0c2b5dde23200d890eeaeec12887eacc00baaf85f717ebc8221f