Overview
overview
7Static
static
63779ec96a1...18.apk
android-9-x86
73779ec96a1...18.apk
android-10-x64
7core.apk
android-9-x86
core.apk
android-10-x64
core.apk
android-11-x64
res.apk
android-9-x86
res.apk
android-10-x64
res.apk
android-11-x64
update.apk
android-9-x86
update.apk
android-10-x64
update.apk
android-11-x64
v0.1.8_egret-dex.apk
android-9-x86
v0.1.8_egret-dex.apk
android-10-x64
v0.1.8_egret-dex.apk
android-11-x64
Analysis
-
max time kernel
3s -
max time network
131s -
platform
android_x64 -
resource
android-x64-20240506-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240506-enlocale:en-usos:android-10-x64system -
submitted
12-05-2024 01:13
Static task
static1
Behavioral task
behavioral1
Sample
3779ec96a117c4e92b1707506727b34f_JaffaCakes118.apk
Resource
android-x86-arm-20240506-en
Behavioral task
behavioral2
Sample
3779ec96a117c4e92b1707506727b34f_JaffaCakes118.apk
Resource
android-x64-20240506-en
Behavioral task
behavioral3
Sample
core.apk
Resource
android-x86-arm-20240506-en
Behavioral task
behavioral4
Sample
core.apk
Resource
android-x64-20240506-en
Behavioral task
behavioral5
Sample
core.apk
Resource
android-x64-arm64-20240506-en
Behavioral task
behavioral6
Sample
res.apk
Resource
android-x86-arm-20240506-en
Behavioral task
behavioral7
Sample
res.apk
Resource
android-x64-20240506-en
Behavioral task
behavioral8
Sample
res.apk
Resource
android-x64-arm64-20240506-en
Behavioral task
behavioral9
Sample
update.apk
Resource
android-x86-arm-20240506-en
Behavioral task
behavioral10
Sample
update.apk
Resource
android-x64-20240506-en
Behavioral task
behavioral11
Sample
update.apk
Resource
android-x64-arm64-20240506-en
Behavioral task
behavioral12
Sample
v0.1.8_egret-dex.apk
Resource
android-x86-arm-20240506-en
Behavioral task
behavioral13
Sample
v0.1.8_egret-dex.apk
Resource
android-x64-20240506-en
Behavioral task
behavioral14
Sample
v0.1.8_egret-dex.apk
Resource
android-x64-arm64-20240506-en
General
-
Target
3779ec96a117c4e92b1707506727b34f_JaffaCakes118.apk
-
Size
14.6MB
-
MD5
3779ec96a117c4e92b1707506727b34f
-
SHA1
bb0240bd2fef251ea5b4de6206834469d67ac00a
-
SHA256
eff7155af38497335622426d7bd5a0809149259691bd5a9b052655fd4b7d225b
-
SHA512
7d2d50824becfcb63a86485943914da016964d8380afa63fad20946c693d3869079e293495e8074b778bf574e60df0774685815a170e6b328d4b263e197c79dd
-
SSDEEP
393216:YjQ67TpVAc3Txql4JuF3I7D5Fb0Mpgpr5GOY5zG9Pk5CgFzvO1nF:YkUTXAcNAl3k0Mpgl5Y5S98LF6v
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo com.byhzgbt.jlhd -
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo com.byhzgbt.jlhd -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.byhzgbt.jlhd -
Queries the phone number (MSISDN for GSM devices) 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.byhzgbt.jlhd -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.byhzgbt.jlhd -
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Reads information about phone network operator. 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.byhzgbt.jlhd
Processes
-
com.byhzgbt.jlhd1⤵
- Checks CPU information
- Checks memory information
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:5057
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
65B
MD56f6a8876c6e70ddc1f9abacb5b362b11
SHA18d29e684d2951cf6616df6497260b8624e869d11
SHA25653e98bae9cac7d01ce3bfefe01c8cfc41786caa9e5f57e5e3083448bc121e72a
SHA512dc720fc7028185850a051f6a10a6e2d5875471b89961427c9f42c2075462d36d4b61ef8c462847221823cb69bb10e210b428bf03e13348ef9d642c31a288ed03