Analysis
-
max time kernel
47s -
max time network
141s -
platform
android_x86 -
resource
android-x86-arm-20240506-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240506-enlocale:en-usos:android-9-x86system -
submitted
10-05-2024 09:07
Static task
static1
Behavioral task
behavioral1
Sample
2e5f0e36d8143294b0360b96136f3141_JaffaCakes118.apk
Resource
android-x86-arm-20240506-en
Behavioral task
behavioral2
Sample
2e5f0e36d8143294b0360b96136f3141_JaffaCakes118.apk
Resource
android-x64-20240506-en
Behavioral task
behavioral3
Sample
2e5f0e36d8143294b0360b96136f3141_JaffaCakes118.apk
Resource
android-x64-arm64-20240506-en
General
-
Target
2e5f0e36d8143294b0360b96136f3141_JaffaCakes118.apk
-
Size
1.2MB
-
MD5
2e5f0e36d8143294b0360b96136f3141
-
SHA1
db0abcfece803fbf9dfe8d741f3ad40926416a58
-
SHA256
beb50b479cc5aaa204bec21cb5b265495bcde4f7fdd1f8ca5e3e26ff969052a1
-
SHA512
048f2301da3faebf9da9112c753c86e5edb0c2dfaf47ccc2af2377e8af68fd2d2512ed0944c321a01d1748d16c30c77a38cb918b9a209e27dca27e16d42ccfec
-
SSDEEP
24576:L1qwf/1UbJqh1q0iEYpnNvivm8hMwdsF0y2kUHDqrTMaR9:dmcZMnNqkUA2kUjQR9
Malware Config
Signatures
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
Processes:
com.hardrock.smartscreenoffdescription ioc process Framework service call android.app.IActivityManager.setServiceForeground com.hardrock.smartscreenoff -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes:
com.hardrock.smartscreenoffdescription ioc process Framework service call android.app.IActivityManager.registerReceiver com.hardrock.smartscreenoff -
Tries to add a device administrator. 2 TTPs 1 IoCs