05f8210167925114c4cc7c3cf6525754522ee627f8f51cecbd02b932acdd4cc4

Analysis

max time kernel
143s
max time network
130s
platform
android_x86
resource
android-x86-arm-20240506-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240506-enlocale:en-usos:android-9-x86system
submitted
08-05-2024 21:20

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

26cb6eb048ca0f869a264906cd7b3de7_JaffaCakes118.apk
Size

27.4MB
MD5

26cb6eb048ca0f869a264906cd7b3de7
SHA1

f6ef882f70640cceb8be30cfe0163350de57cadd
SHA256

05f8210167925114c4cc7c3cf6525754522ee627f8f51cecbd02b932acdd4cc4
SHA512

b6df9184f4d5e796a3c1a325786b22f46449a46d9b23aeaeea0ac0590d3b958356a397caa84ef544c820a583058dc29fe725ee456d21dd8ba3d61e99d86a9584
SSDEEP

786432:GdYAKBija2k/xZwOIr6dV7fVS3u1sbZ76Y9sc7nAUP:GdqBiqZwOIrgVreu146ksc7AUP

Score

7^/10

discovery evasion impact

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.bladehero.cdws.egame

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.bladehero.cdws.egame/files/egame_temp.jar	4333	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.bladehero.cdws.egame/files/egame_temp.jar --output-vdex-fd=64 --oat-fd=67 --oat-location=/data/user/0/com.bladehero.cdws.egame/files/oat/x86/egame_temp.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.bladehero.cdws.egame/files/egame_temp.jar	4256	com.bladehero.cdws.egame

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.bladehero.cdws.egame

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.bladehero.cdws.egame

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.bladehero.cdws.egame

com.bladehero.cdws.egame
1⤵
- Checks CPU information
- Loads dropped Dex/Jar
- Queries information about the current Wi-Fi connection
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4256
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.bladehero.cdws.egame/files/egame_temp.jar --output-vdex-fd=64 --oat-fd=67 --oat-location=/data/user/0/com.bladehero.cdws.egame/files/oat/x86/egame_temp.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4333

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.bladehero.cdws.egame/files/egame_temp.jar

Filesize
98KB

MD5
eec5240570ff0e6578e04536be8b0917

SHA1
63a7899a8e68ef216d4e09dad522258b845a57d5

SHA256
6af44e4b6a066fd996351e0a6824d1fa74e7908b1a3a6b4fd494eac67bad320d

SHA512
28976320b5939cafb382851f488337574df66897f76ed456647cf579f25d1d814e3ae3eabbd8e3c4883c039599537efc4ea0fb07cadf22d916e59528fa57b261

Download Submit
/data/data/com.bladehero.cdws.egame/files/egame_temp_.jar

Filesize
98KB

MD5
0f84d2c1360df3054f7e9167ed508565

SHA1
4e87cbec658ad1018e169f279a90e8a4db0562eb

SHA256
efc4c8b8341ff060f2be4b44fb14cd94df92c1be78f3b61ab85b83030e127f65

SHA512
2f0d8d3b11a9f1b9bfae97a42aa2ac02701ae5c5fd8cce3550c09aa4dfb1ddeb415bf150e3eba64cc801d9fedb09c3230b400f3a3491b7d66dcede7f32e761c6

Download Submit
/data/data/com.bladehero.cdws.egame/files/umeng_analytics_cache

Filesize
403B

MD5
b5f44ccf5c9c5d33f5d98f68b7aaa41e

SHA1
5b8371830cbd10b74c908d984b25c316adf81cc1

SHA256
b22dabf08505062e7ca90422709911722a7f3d75816de327d1567a64971433e1

SHA512
ef127dc7cec23ba9d81f4971bfa6e48b90c31b1196f062de4c6112ac79dc5de15d250634c16ef1635d03923e537910c0c7e7a55787526d6138f7ea2606a48f18

Download Submit
/data/data/com.bladehero.cdws.egame/files/umeng_analytics_cache

Filesize
403B

MD5
d79781023c1d8c8f723bdbdd34e239e4

SHA1
fbde29bc5a05a975b4b2d4572f29fd83c6d2b6c3

SHA256
423e1f36aadc54c3b3f4bb46358f46f188ea5605cbe8b3c8cbf53feeb0746a77

SHA512
ec46724d3d9f34272b71e7f567776d756faf267cd6ccab207e54d4afe71597c0d100bb3d6eb174cfeb9acf1bb743daf7f4baa01f98d26dcdd4604278c1b7a9a2

Download Submit
/data/data/com.bladehero.cdws.egame/files/umeng_analytics_cache

Filesize
404B

MD5
fba66268edcaf1248fa4cf0c0abbd269

SHA1
0e6f761151fcaec048f6796c3f7c2b4e8fad3aeb

SHA256
d8db6f55f568c40a61154f025e488acd6fc260f9eb52923a1cd44295875d62e3

SHA512
a5d527d803d65ae74af3f0ab096e3cd9400c400cc007eaf059316063b3b80ec35fd7824290dee488e48e1eee06bd8a8e75c317e1fa16a8c839f541a92e862194

Download Submit
/data/data/com.bladehero.cdws.egame/files/umeng_analytics_cache

Filesize
244B

MD5
e9e4434c782e0f7c0390d8384bd5a2d5

SHA1
3516c6c6a4c0c946596cb435bf4e2ba17484b9ac

SHA256
d3effcbe35f88e3b5b0676db48d31e6b64c6f1aa4cc0b9e44bf130b99d043cd1

SHA512
fe99416719f7ac625a41a3a41250dcc5280bdde53b55b212bf72ed5263af1457fd50fe8f6a9522579010110d32ea24ceb707d0c152416adf4679bb170ebddd89

Download Submit
/data/data/com.bladehero.cdws.egame/files/umeng_analytics_cache

Filesize
403B

MD5
d60efd1da43bd1d6cc82f1f8cf385609

SHA1
1aff73d3b81db6df0ae9c9882f733445312b53d7

SHA256
c7cce0e123470aba378812d7453c488cd193ffc8f4a5c1e6d08baf59b9a47698

SHA512
5779de5cf0d1907ab5a0314d7dd9de2a5b8ef702b5ead40028480cb00dc536dd6f2de6b564b2e2b2461a7610e6a7e759933c02c565c6fb4d1a192f5bf157bdca

Download Submit
/data/data/com.bladehero.cdws.egame/files/umeng_analytics_cache

Filesize
403B

MD5
e17f8b7f959048b51568f841920fe153

SHA1
0584c16aced9e86c40d074a6eb6ad208d208a4e6

SHA256
73781a39de618eb04f2e75788f33584c3bad977be1e49240e7cc10dca0559735

SHA512
c3c745411568064bbffdaca0349863f2fb494c1497ba682d90c0daffb337d02e0e737eb2ac75081ff11977c7ef41120cf7469816cfbd626df48a2d9a3632537d

Download Submit
/data/user/0/com.bladehero.cdws.egame/files/egame_temp.jar

Filesize
242KB

MD5
27c85edc26ee3b7c4ee9b9bb67d66e05

SHA1
a37e49754ffa2491d941aa116a08a3a970f99797

SHA256
e46ffa3827dc2fce9c34424fdd6bc19c195fd6c079ef7ad08c6afa2005a6e0a8

SHA512
7535542042a3a1cad9b41915cbde38b42765c0f32e99d233d45acd1ab6f1bcaa7ba0637b599c281b048aca31ce9ab0ad593a661df5141297b1f1908a0bbeacd0

Download Submit
/data/user/0/com.bladehero.cdws.egame/files/egame_temp.jar

Filesize
242KB

MD5
2d397d5b70652c2f6f2ab16597d56b59

SHA1
6f30c9258224e018a17fddb5d7ba0a0df3959938

SHA256
a6446b8bb8d8806a8a1948fa2d984b4b822dcb66a636be92a6656f7ef5e66cac

SHA512
12ea91b8a5a5184e01d883afa8dd7c7c8840cc551ae832a37fd80575911f691c56aa84da54096a54dda6b143597203f71a06eab132b148a43d0e27045764f533

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads