Analysis
-
max time kernel
151s -
max time network
161s -
platform
android_x64 -
resource
android-x64-20240506-en -
resource tags
-
submitted
11-05-2024 16:07
General
-
Target
356b1560d868485613d6676f94c92cc6_JaffaCakes118.apk
-
Size
4.0MB
-
MD5
356b1560d868485613d6676f94c92cc6
-
SHA1
fcb695e6a10a7990bb0ea4c8208ecf5affaf8507
-
SHA256
c56653200550888fe3f13aa3090435663b4b5222630fce53def18101d4983250
-
SHA512
2c182f38fcfd99301781670bd70b043f78b45c79eae981b95d793a8eed9812da309b3b8647db585a08a842c89214ca8bf9cc06a0e9bfb8b1712216d23903b2e3
-
SSDEEP
98304:syp4rod2rS3KKg5xBNdsFkv39ElDb6pMvaadXnTd+6u4/roqn:p4nrdzxBIWKpHayXTdPug
Score
7/10
Malware Config
Signatures
-
Queries information about running processes on the device 1 TTPs 2 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
-
Acquires the wake lock 1 IoCs
-
Checks if the internet connection is available 1 TTPs 2 IoCs
-
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Reads information about phone network operator. 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
Processes
-
com.phqp_2.Project1⤵
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
-
com.phqp_2.Project:pushcore1⤵
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)