Analysis

  • max time kernel
    3s
  • max time network
    137s
  • platform
    android_x86
  • resource
    android-x86-arm-20240221-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
  • submitted
    27-04-2024 22:34

General

  • Target

    03c7cd75c07ef5331ce8ba81712a65e9_JaffaCakes118.apk

  • Size

    21.0MB

  • MD5

    03c7cd75c07ef5331ce8ba81712a65e9

  • SHA1

    80422541202734ce12c55f977d19be5f88fde84d

  • SHA256

    725ea5626f8d3fd255ee4d9f1f55efcf1436492608be0ba90e5d8e8d46d5c627

  • SHA512

    8f930d9c47058a57b618e0b7b42693518e7fed3d350855b90ce85ebc727a84ea8c2b8c12b50c84fb9c153b2e24cba746f6c923f8fa0232a29c49c69ec89ab4cc

  • SSDEEP

    393216:odBoMMKcS2J+w39MzUJV9baMUQ8Iidg0210Lpe/6q9E2a+ZnN:cBoMM+2J2OJ2b3dgV10otE2aKN

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • me.dreamsky.iwmycatjr
    1⤵
    • Queries information about the current Wi-Fi connection
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4322

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/me.dreamsky.iwmycatjr/cache/com.heyzap.sdk/entries.json
    Filesize

    26B

    MD5

    9abb23440eb098329d40e2c2ab91f020

    SHA1

    3f804b1a0b720796c9ba9e9e4365f31094c51b24

    SHA256

    619232d578647cd5da389f8f52723df7347cbace501fdd160869ec53addfab54

    SHA512

    0ee0813d36e7e060fc2b6f48acd10c7ddd1eace15cd39daf4903d91382a00b6aa9199be424c13bc1bb420689cb57904a90c77aefcb4bad1605045eb6d24151e2

  • /data/data/me.dreamsky.iwmycatjr/files/plugin.apk
    Filesize

    625KB

    MD5

    aedd3e121e08f53cc5223c45e527c36a

    SHA1

    5e65ae80ae1d373c5809eec764915109543bd6dd

    SHA256

    6fb65b2ed9661c5aaf7d36f3b010f1692d0d79b6e0c5af86499675fe4828768d

    SHA512

    1f5431db5bc0b15128b9cb3fc377e8679554f344e7bdf7bea6e7c8414d5b8596256d85dd988475d4b9b6cf43badb536ded820deba88e28952dd93ec0ab7b80db