Analysis
-
max time kernel
179s -
max time network
138s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system -
submitted
17/05/2024, 16:51
Static task
static1
Behavioral task
behavioral1
Sample
507f5855e37623cd1c8a9d43e70fbd69_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
507f5855e37623cd1c8a9d43e70fbd69_JaffaCakes118.apk
Resource
android-x64-20240514-en
General
-
Target
507f5855e37623cd1c8a9d43e70fbd69_JaffaCakes118.apk
-
Size
7.1MB
-
MD5
507f5855e37623cd1c8a9d43e70fbd69
-
SHA1
911af08e663e4d500352134a4c426c397d554543
-
SHA256
cede6df0e121f7155fd607942b731db61ea3116736bb3cfe40d63b6ac7cf011f
-
SHA512
804531b5af3cf4adefb3590eabbb6198a9c7ae0dd3b4b68cb4485b6874f821701db56efeeb765c276477fdddc46893798af728f737aecea53558c8fd38f967e3
-
SSDEEP
196608:MkT8Ew6zbhe/N9bMvjKxyFDwNawd2kQMO+d9jUH:MQ0abh3jBFw8BQzAH
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Requests cell location 2 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.tuan800.tao800 -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.tuan800.tao800 -
Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
description ioc Process Framework service call android.net.wifi.IWifiManager.getScanResults com.tuan800.tao800 -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.tuan800.tao800 -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.tuan800.tao800 -
Reads information about phone network operator. 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.tuan800.tao800
Processes
-
com.tuan800.tao8001⤵
- Requests cell location
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4252
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD532a387d44831daa93317797b18c7befe
SHA16b0d3d8e15371309d93f7aa3abb2f789d1a87bae
SHA2565017c06c987eae8c89d13afeb1f9d3c7aae5fab8c6e90c8599302b0811856786
SHA512f947c73b1ed6c004b4e7810b24d56a20094e74c31438ac65c3d9f90d15102da643f141a072675aa27ed852a3ced9b64e296589347f7797a34e0b91a8fb090157
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
185KB
MD5e6f890917cdd5233efb3997e4664ac21
SHA109fb033eaf4a34d45c7c82c042cbbaeae9ea603e
SHA25657ab6a27999d4e3787297109a6e0b54703d9acb41700daccaedabeaa78d8e913
SHA5123d4d3828fd43afecb3dd7af3227ec49f2631cfb569002d83ce1b720d815e2094fba3a4e340498074b836543c5328880601d658cbb281e93e5b7b8b5da42dc3a8