Analysis
-
max time kernel
12s -
max time network
129s -
platform
android_x86 -
resource
android-x86-arm-20240506-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240506-enlocale:en-usos:android-9-x86system -
submitted
09/05/2024, 12:19
Behavioral task
behavioral1
Sample
29f05c26a87f6b7e65fba666d7b227bd_JaffaCakes118.apk
Resource
android-x86-arm-20240506-en
Behavioral task
behavioral2
Sample
29f05c26a87f6b7e65fba666d7b227bd_JaffaCakes118.apk
Resource
android-x64-20240506-en
General
-
Target
29f05c26a87f6b7e65fba666d7b227bd_JaffaCakes118.apk
-
Size
31.7MB
-
MD5
29f05c26a87f6b7e65fba666d7b227bd
-
SHA1
684ef534747034335b75c65cc13dc1fc5b7cb6da
-
SHA256
4cca032da46ae57d6d63fd694bd016ae45ee7dff81c4df1d8b802301849bd033
-
SHA512
9ef7fcc4298e07371d272eaa619cad6e7c98ee86d8b0d06b4352163ccfe69be5bbf4fd9da87f9986c5486bb2975eab3a16d5ee42a0e362380af21f3ec5cbc345
-
SSDEEP
786432:k3VO5UVWuph/aLrlpOQ6yXxQJZ/YPB0CVMtrY4LQ0a5:QVOIjhiLKsxGHC6trNY
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo com.bchao.soujisaom.siagipewiiwetejq -
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo com.bchao.soujisaom.siagipewiiwetejq -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.bchao.soujisaom.siagipewiiwetejq -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.bchao.soujisaom.siagipewiiwetejq -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.bchao.soujisaom.siagipewiiwetejq -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.bchao.soujisaom.siagipewiiwetejq
Processes
-
com.bchao.soujisaom.siagipewiiwetejq1⤵
- Checks CPU information
- Checks memory information
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4279
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9KB
MD5e8e0527a01aefdb89afd2c508f131da1
SHA1f1103e6b260c657ceb3d95f1b023af3fda8b133a
SHA256f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce
SHA512fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34