Analysis

  • max time kernel
    179s
  • max time network
    138s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    17/05/2024, 16:51

General

  • Target

    507f5855e37623cd1c8a9d43e70fbd69_JaffaCakes118.apk

  • Size

    7.1MB

  • MD5

    507f5855e37623cd1c8a9d43e70fbd69

  • SHA1

    911af08e663e4d500352134a4c426c397d554543

  • SHA256

    cede6df0e121f7155fd607942b731db61ea3116736bb3cfe40d63b6ac7cf011f

  • SHA512

    804531b5af3cf4adefb3590eabbb6198a9c7ae0dd3b4b68cb4485b6874f821701db56efeeb765c276477fdddc46893798af728f737aecea53558c8fd38f967e3

  • SSDEEP

    196608:MkT8Ew6zbhe/N9bMvjKxyFDwNawd2kQMO+d9jUH:MQ0abh3jBFw8BQzAH

Malware Config

Signatures

Processes

  • com.tuan800.tao800
    1⤵
    • Requests cell location
    • Queries information about the current Wi-Fi connection
    • Queries information about the current nearby Wi-Fi networks
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4252

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.tuan800.tao800/databases/tao800.db

          Filesize

          4KB

          MD5

          f2b4b0190b9f384ca885f0c8c9b14700

          SHA1

          934ff2646757b5b6e7f20f6a0aa76c7f995d9361

          SHA256

          0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

          SHA512

          ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

        • /data/data/com.tuan800.tao800/databases/tao800.db-journal

          Filesize

          512B

          MD5

          32a387d44831daa93317797b18c7befe

          SHA1

          6b0d3d8e15371309d93f7aa3abb2f789d1a87bae

          SHA256

          5017c06c987eae8c89d13afeb1f9d3c7aae5fab8c6e90c8599302b0811856786

          SHA512

          f947c73b1ed6c004b4e7810b24d56a20094e74c31438ac65c3d9f90d15102da643f141a072675aa27ed852a3ced9b64e296589347f7797a34e0b91a8fb090157

        • /data/data/com.tuan800.tao800/databases/tao800.db-shm

          Filesize

          32KB

          MD5

          bb7df04e1b0a2570657527a7e108ae23

          SHA1

          5188431849b4613152fd7bdba6a3ff0a4fd6424b

          SHA256

          c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

          SHA512

          768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

        • /data/data/com.tuan800.tao800/databases/tao800.db-wal

          Filesize

          185KB

          MD5

          e6f890917cdd5233efb3997e4664ac21

          SHA1

          09fb033eaf4a34d45c7c82c042cbbaeae9ea603e

          SHA256

          57ab6a27999d4e3787297109a6e0b54703d9acb41700daccaedabeaa78d8e913

          SHA512

          3d4d3828fd43afecb3dd7af3227ec49f2631cfb569002d83ce1b720d815e2094fba3a4e340498074b836543c5328880601d658cbb281e93e5b7b8b5da42dc3a8