Analysis
-
max time kernel
3s -
max time network
137s -
platform
android_x86 -
resource
android-x86-arm-20240221-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system -
submitted
27-04-2024 22:34
Static task
static1
General
-
Target
03c7cd75c07ef5331ce8ba81712a65e9_JaffaCakes118.apk
-
Size
21.0MB
-
MD5
03c7cd75c07ef5331ce8ba81712a65e9
-
SHA1
80422541202734ce12c55f977d19be5f88fde84d
-
SHA256
725ea5626f8d3fd255ee4d9f1f55efcf1436492608be0ba90e5d8e8d46d5c627
-
SHA512
8f930d9c47058a57b618e0b7b42693518e7fed3d350855b90ce85ebc727a84ea8c2b8c12b50c84fb9c153b2e24cba746f6c923f8fa0232a29c49c69ec89ab4cc
-
SSDEEP
393216:odBoMMKcS2J+w39MzUJV9baMUQ8Iidg0210Lpe/6q9E2a+ZnN:cBoMM+2J2OJ2b3dgV10otE2aKN
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Processes:
me.dreamsky.iwmycatjrdescription ioc process Framework service call android.net.wifi.IWifiManager.getConnectionInfo me.dreamsky.iwmycatjr -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes:
me.dreamsky.iwmycatjrdescription ioc process Framework API call javax.crypto.Cipher.doFinal me.dreamsky.iwmycatjr
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/me.dreamsky.iwmycatjr/cache/com.heyzap.sdk/entries.jsonFilesize
26B
MD59abb23440eb098329d40e2c2ab91f020
SHA13f804b1a0b720796c9ba9e9e4365f31094c51b24
SHA256619232d578647cd5da389f8f52723df7347cbace501fdd160869ec53addfab54
SHA5120ee0813d36e7e060fc2b6f48acd10c7ddd1eace15cd39daf4903d91382a00b6aa9199be424c13bc1bb420689cb57904a90c77aefcb4bad1605045eb6d24151e2
-
/data/data/me.dreamsky.iwmycatjr/files/plugin.apkFilesize
625KB
MD5aedd3e121e08f53cc5223c45e527c36a
SHA15e65ae80ae1d373c5809eec764915109543bd6dd
SHA2566fb65b2ed9661c5aaf7d36f3b010f1692d0d79b6e0c5af86499675fe4828768d
SHA5121f5431db5bc0b15128b9cb3fc377e8679554f344e7bdf7bea6e7c8414d5b8596256d85dd988475d4b9b6cf43badb536ded820deba88e28952dd93ec0ab7b80db