Analysis
-
max time kernel
2s -
max time network
153s -
platform
android_x86 -
resource
android-x86-arm-20240506-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240506-enlocale:en-usos:android-9-x86system -
submitted
12-05-2024 19:41
Behavioral task
behavioral1
Sample
3bc2ec87a2ed27ee88809b7f05a7b68b_JaffaCakes118.apk
Resource
android-x86-arm-20240506-en
Behavioral task
behavioral2
Sample
Alipay_msp_online.apk
Resource
android-x86-arm-20240506-en
General
-
Target
Alipay_msp_online.apk
-
Size
354KB
-
MD5
89c04e1ebcd58eca6dd93211628ed0bc
-
SHA1
7d1e77ce25a635299704dbd95bd95c697572ea9d
-
SHA256
ee3c608fff51b313f4e0b3e542bedccb4d4db4c8eb44e63bf4be0d468e9ee117
-
SHA512
3dccaeff9906401855f3071c91012926d7e9250674ea0bb89606e4862223a8343fc7b9369afe4e50031d261b45437107c018f565da5615c49721c3bf1bf6ed01
-
SSDEEP
6144:cH8LfOo+BjGVN8TdW4zxgnm1Us3JuOK2vf5C8EcPK+WvyQcQ2fnq7:cHLxBiVN8pWggmlY25CLE8RcQ2fnq7
Malware Config
Signatures
-
Requests cell location 2 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
Processes:
com.alipay.android.appdescription ioc Process Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.alipay.android.app -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Processes:
com.alipay.android.appdescription ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.alipay.android.app -
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes:
com.alipay.android.appdescription ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.alipay.android.app