Analysis
-
max time kernel
179s -
max time network
185s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system -
submitted
17/05/2024, 15:11
Static task
static1
Behavioral task
behavioral1
Sample
502535716efa44eba898cee9e26d5700_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
502535716efa44eba898cee9e26d5700_JaffaCakes118.apk
Resource
android-x64-20240514-en
General
-
Target
502535716efa44eba898cee9e26d5700_JaffaCakes118.apk
-
Size
8.0MB
-
MD5
502535716efa44eba898cee9e26d5700
-
SHA1
1cc86350fd5515e00a315980ade3fc7a094b6f48
-
SHA256
3968e7de4ec0548f333d4ababeb7eed3291f8ed55ecfb9092c5585f10adff38a
-
SHA512
9767d816f67ad0e43351899479c14baa5263ddfcee1a11dfcc8065c4e2a4922049debb32b51b180e4bf36d0ff2822a61e2822b4ea62c7404bc1b7eb0e523fabb
-
SSDEEP
196608:lGp19ZWAoCvTOUY5+sUE3zIufDKkrz01Y03WwAY:l819LvTOb+sUENukrz0O03fAY
Malware Config
Signatures
-
Requests cell location 2 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.diandianzhuan.app -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.diandianzhuan.app -
Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
description ioc Process Framework service call android.net.wifi.IWifiManager.getScanResults com.diandianzhuan.app -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.diandianzhuan.app -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.diandianzhuan.app -
Reads information about phone network operator. 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.diandianzhuan.app
Processes
-
com.diandianzhuan.app1⤵
- Requests cell location
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4284
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12KB
MD53fe30614d7e0d11db870b4624f6c50e0
SHA1053ff0fc621ab40f2afeddb3e7b4a73ee41ec533
SHA25667c532f0324228dd33b445cd399c1426e3a0e0cdc7b9358c66b402c5d40a838d
SHA512c7c09e97a408e88aacaf8099ad4d1fa604d58113393500a384eb3c2eb7c3c105af41314934b86eca2f088045cbab5a20d768bbb295448dc1ae6cb6c3f59821ae
-
Filesize
512B
MD5b8b38a323297fbe1a00232636e21b112
SHA1b700d24a1df95499234ece9df4366c86f52648af
SHA256b12dde39b170239c1518b0bf7452f1444373ba27ce1f6683134626c80b1479d6
SHA512dffd7a796c48fdbe2bc6630c1811c55601a6c55dbc24332d32768ec4d787c55023efda98694b4fe19ba144b3c4feac4356b9af76635c5f3be6b810228d0fa50d
-
Filesize
16KB
MD5c9ee272a2a84bd2494db4cba94a8049c
SHA16efdac60cdc7b4260572cf7f9db75d77ece223e7
SHA2562568d13b6e2b2851983b49cb8e2974912f9e5dc878b50e67a4efefd8dc23ed5f
SHA512f2315f2bb5ff0a9a5a246fea8bb23afada96b3818a458ac54be865f9cc6f2db06c777774c66d3ea396934085b0657f38992f022a06dbfbf4cce65df691a809e7
-
Filesize
20KB
MD5d5950b4302984c62ae015c70f8359000
SHA144de2b51c2942afc6706cfd591bd17e0b22732a2
SHA256b25855280d949ff775756116e72d78ac73561352dfa33866835ccd355d037f9d
SHA51239c732e681ba5913a12d78056a128a2f7a2cf3b78f5735727e629b15bd5f498ea22ca1bee6bd0c7580c2443cc08e4416c454679bf52ca34fb91366f6374b334c
-
Filesize
512B
MD559484f7de01a75bced6a6cbfb3e25708
SHA1cffa0632aa976638d6bc57d47623bc5e08e3db3d
SHA256394b28d8064590abc97072b8201a625a02f48afc14082c3e76f14cd4da517a03
SHA512a2b993ec359702ae0ad08e17225afcb47c9a6dc39c063eeb15ffddf5e8c6a42cacfd5ef01971c6d70399973a5262b88568a81cada38d67c3be4577410a883f31
-
Filesize
32KB
MD5a90d55b6097e3a9528e8ee5782d54784
SHA197b06f5907be8ffcb8e7e7e645bb547944545a18
SHA256e30632692390efb09f26fff1cc5b654eaca04d697f3d3b2a729da0b6420d5989
SHA5129a002bc87ebcf419e23dad9fde86876dd937cabdc05d702aee273d22e13502f35f0b9d3c661cc44d981cfec55cc5c33048ccd538354c80a15af55c557457e233
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5f9e3b2165d06eb76d9d91f9b3a73624d
SHA1a3aecc851d1ccf35c85def8e930870ffce8b7880
SHA25650b28a80032307478661141597bbcc63438d349539802e5737766e31805b84ff
SHA51223426680a02e42af70668f4e3054518d22c64ae8bb21e62791b929397a226b09a91f4feb61784d6a810500e1f3374881d6780070def3ec4ad9ef1d9a92b1583c
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
20KB
MD5afac4972263ee900ab120e0a6bef4aeb
SHA1c2d98d4d0554416cc944724c15bce19dfbad91ba
SHA256f3943b4ed763bd665b0e1ef4c8600e881f535c2776b2090d5fceda0662c9c44a
SHA51230c550b27ca8bc497eef4395e7bd2f5022fe6ab1453e095cb2e00d7c6a586809b4d75f545dd582142cd7603e9ba4044388e28d65e1b73d54aa86296575e40ab2
-
Filesize
128B
MD5029d549656c7c50b818148fd6f747ee0
SHA1d675e6238fa4fa33bf849eb96a6d8c0bb0c194dd
SHA256466d1b8f3ac694675abc2b7cba89c6acd087d39ed176109a83166ba99c436d34
SHA5129b07c4d3cf88b9727911c3e847981e31eed7ee2f4956132954329bdf7e27a199d5b42167d3319f171222c9d7cc584bffb6c25c13fb2e977aebc576e4e0b47cec