Analysis
-
max time kernel
150s -
max time network
158s -
platform
android_x86 -
resource
android-x86-arm-20240506-en -
resource tags
-
submitted
11-05-2024 16:07
General
-
Target
356b1560d868485613d6676f94c92cc6_JaffaCakes118.apk
-
Size
4.0MB
-
MD5
356b1560d868485613d6676f94c92cc6
-
SHA1
fcb695e6a10a7990bb0ea4c8208ecf5affaf8507
-
SHA256
c56653200550888fe3f13aa3090435663b4b5222630fce53def18101d4983250
-
SHA512
2c182f38fcfd99301781670bd70b043f78b45c79eae981b95d793a8eed9812da309b3b8647db585a08a842c89214ca8bf9cc06a0e9bfb8b1712216d23903b2e3
-
SSDEEP
98304:syp4rod2rS3KKg5xBNdsFkv39ElDb6pMvaadXnTd+6u4/roqn:p4nrdzxBIWKpHayXTdPug
Malware Config
Signatures
-
Queries information about running processes on the device 1 TTPs 2 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
-
Acquires the wake lock 1 IoCs
-
Checks if the internet connection is available 1 TTPs 2 IoCs
-
Reads information about phone network operator. 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
Processes
-
com.phqp_2.Project1⤵
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
-
com.phqp_2.Project:pushcore1⤵
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
32B
MD523cab698ea99933470a2a2fe6ec0a5e7
SHA19a43769cb896907da6239a46493fe29758ae0648
SHA2561ec83b31fe47edd04c3995ec4d211cdeb4f039cfd1c8d22b7a8dc917cee0da95
SHA5125e539ec453a79817767565661cdf9daa38bafd4468d71b8f49d6ac9495f074b5b62eac957214d1ca9a1bd98ccba80d7a3dad155aee4cbe46851e510974ace096