Analysis
-
max time kernel
123s -
max time network
150s -
platform
android_x64 -
resource
android-x64-20240506-en -
resource tags
-
submitted
09/05/2024, 15:23
General
-
Target
2a9aefe8b440f58b535971750f85ec8a_JaffaCakes118.apk
-
Size
2.2MB
-
MD5
2a9aefe8b440f58b535971750f85ec8a
-
SHA1
651a512045f393d9749bd67555a3c7cb23997cc2
-
SHA256
197efc4899744e82f2d09c1dda1619337b46a7eee55583e7acf34e8a0a863e07
-
SHA512
4abd6e4ada96bb2b170fd19719b64154bfacd7a9f9de665a2103d193f00ab937cff84860f2be7cace83a1bea36bc696095bf71e678f6dbcf239f45216f8b9cf5
-
SSDEEP
49152:jvSbvVF4HME45ZDk4VToo3Ru4i/dz+MO7DIydMnQvBbBh8IaJLmgKUIuQ:jvSbvV2HMEspi/Z+MoD1lKL9K
Malware Config
Signatures
-
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Acquires the wake lock 1 IoCs
-
Checks if the internet connection is available 1 TTPs 1 IoCs
-
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes
-
com.nqmobile.easyfinder1⤵
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
42B
MD5e40054e64a05741563033634faa3979e
SHA1a1bd4f05d781e9791e24aaca05292e5ccec01b05
SHA256bf5a9fa6dd0d08e08b23c46bc92d6a29dc334d6d9d436587b9c7b99dd19bc8e2
SHA5124dab272a7fd703d4037845da84d38ee4bc0e8f862a295c00e2646893543a814f90d37926ec894f333c89aeb98fc23c9cd5449ab0efe4d5fbd89c631644a99ff9
-
Filesize
44B
MD5e11f590fcc66df44e95f7e75d7a5fa00
SHA1857893cefa9d49e5023a3319a3160d96ee66b799
SHA2560b1d80d946ff5707873a9cb8354a489454a7405847f8af19f1dabaab7da9fd7d
SHA512d5cfa499d0c8767b40443524c578e7ad85a7f279dd27c327a2d6aa59013ecf47c02245741e47b7e6991674b7f38100e9d92149f769431206ecc54c561a6d01ef
-
Filesize
58B
MD5e8b75e8e80d5e243ae32d130f2df248a
SHA156ed7e8b9f59152bfd57e22c103c55150ffe42ef
SHA25649644a11239657f91d7001a9088ba18685085fd35db1067869cf6f0795468dd0
SHA512fedaae79c5480d54136f569cba23c292933be0c186d2bd68532b23457effa375bbf14b779b1e0a15b5c331b8616539249d6ad54a7fef49b098003bdc5e92dc70
-
Filesize
258B
MD561c059fa18bf6902911a1618d7af509e
SHA15fd1c771575effb93d64c061658e168d34899abd
SHA2560196b566d7bcbd2a7a3e878cbff8b3236c474c34c4cf09d9ca512d2c5e85c4fe
SHA512af690b486f7b994ebe1250603a34917369517a4edcbd768ccb602d9ebffa60fbb1faa04e1c094b6d44176334381c69c3f8b8be2e541be2109d18386e145d0252