9df5fb6688f7e5bd569d15695ebe8c70c385d586b035372992095274b6382ea5

Analysis

max time kernel
34s
max time network
130s
platform
android_x86
resource
android-x86-arm-20240506-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240506-enlocale:en-usos:android-9-x86system
submitted
08/05/2024, 22:15

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

26fc74eebce94b81d161a6220a965ddd_JaffaCakes118.apk
Size

24.4MB
MD5

26fc74eebce94b81d161a6220a965ddd
SHA1

dbe39fd557ff04d32a48395607e3f7db4306f265
SHA256

9df5fb6688f7e5bd569d15695ebe8c70c385d586b035372992095274b6382ea5
SHA512

d6c382c53936edaf2f0b902cc3faf1b6132a2b093ccba1f16d9b60824d51fdb3431b48aa43d3f856879fbd65d95937e531f51b33ff4419848eda14070c01565c
SSDEEP

786432:GOizVqrU6fNl7HmpC7+uIhc0CQf9nHigA03b1TA:GOizT6f7HmpC7ef5bA03b1TA

Score

6^/10

discovery impact

Malware Config

Signatures

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.ChururuGames.TinyEaster.xc

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.ChururuGames.TinyEaster.xc

com.ChururuGames.TinyEaster.xc
1⤵
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4260
- chmod 755 /data/user/0/com.ChururuGames.TinyEaster.xc/.jiagu/libjiagu.so
  2⤵
  PID:4325
- chmod 755 /data/user/0/com.ChururuGames.TinyEaster.xc/.jiagu/libjiagu.so
  2⤵
  PID:4380
- /system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/com.ChururuGames.TinyEaster.xc/.jiagu/classes.dex --dex-file=/data/data/com.ChururuGames.TinyEaster.xc/.jiagu/classes.dex!classes2.dex --dex-file=/data/data/com.ChururuGames.TinyEaster.xc/.jiagu/classes.dex!classes3.dex --oat-file=/data/data/com.ChururuGames.TinyEaster.xc/.jiagu/oat/x86/classes.odex --inline-max-code-units=0 --compiler-filter=speed
  2⤵
  PID:4408

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact