Analysis
- max time kernel
104s - max time network
181s - platform
android_x64 - resource
android-x64-20240514-en - resource tags
androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system - submitted
19/05/2024, 00:27
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
57a3aa5e5ca2f404f4788b1aaace0321_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
57a3aa5e5ca2f404f4788b1aaace0321_JaffaCakes118.apk
Resource
android-x64-20240514-en
7 signatures
150 seconds
General
- Target 57a3aa5e5ca2f404f4788b1aaace0321_JaffaCakes118.apk
- Size 31.9MB
- Sample240519-arz72agf87
- SHA256 ec3b4432dd09302f7e2622188c275027ee5458293cd932486dc7bf9fcc14f1f1
- MD5 57a3aa5e5ca2f404f4788b1aaace0321
- SHA1 79c229a0af97f2aba13ad67ba4491762a44003f6
- SHA512 88d9f6e127353bbbac3131b90e509f3b04b5c9fb951523321de28cab38e5a0e201daa13a752d779654a92177f377e71e9cd95a421eff15b7631652bc49f0c56c
- SSDEEP 786432:wXCmyEpCtvlyXuzePPGsAeaFwmbqRO+Xhl7c37zSLP:35hsXq6OsV2ORO+/ICLP
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Malware Config
Signatures
- Checks if the Android device is rooted. 1 TTPs 1 IoCs
ioc Process /system/app/Superuser.apk com.insta.gram - Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo com.insta.gram - Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.insta.gram - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.insta.gram - Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.insta.gram - Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
- Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.insta.gram
Processes
-
com.insta.gram1⤵
- Checks if the Android device is rooted.
- Checks memory information
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:5117
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.insta.gram/databases/bugly_db_legu
- Size 100KB
- SHA256 1df02a845bf69c40cb8550f93a5b27f0032603a4b4cb991ce552ccea9b15e533
- MD5 71cc222310e8e99977f303460c617b73
- SHA1 dd32297962d188a98278f94afbe84c201ac57cfe
- SHA512 cdb08f1f4639505557bf574d5a154d69c62416129981af6caa7574ba37f7c17253326b9e07da0b9da92611d57ec5e4567afa3b003dfeda46edf90e90907bc76a
- SSDEEP 768:VAUNVFGf5AjtZ+FNKEqecryrpcgQAemuA1sqDwLxQrSVLzH4MTsnT82:6CtJs
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.insta.gram/databases/bugly_db_legu-journal
- Size 512B
- SHA256 fc2bc521e46ff190f7aaa98624efc059dc525865b3c29f78fc3925f059e62766
- MD5 6046dec0201f82e3d57e9fdd543c1eb3
- SHA1 4aab4eb8c4f15cf4cca00397042cbd651cf27cdc
- SHA512 83b59438246f86e9779faa806863ed56f17e3345e5c8419fd817896de3ba50ec7b702e189d31d50a243eb0566e985111478102dbe45e3bb8fb6186cccd17225e
- MD5 SHA1 SHA512
- Path /data/data/com.insta.gram/databases/bugly_db_legu-journal
- Size 8KB
- SHA256 4b7f62f9c4414ef0eaa4ed8c8f5bf53c67c735c427ecf7b6559a4ab0dd37dec8
- MD5 22cc028fcf27f41881517e8e5ec42bee
- SHA1 610202b42bc8089cf4d78d585b3353dd826ed686
- SHA512 7793696e22490430e2f6b499d7595dcefc04fbc266228748d0186dcc20755039d0d5708e12abb7289d7c75c4020fcd46a2538a77e9695913d03cce1dd79581c1
- SSDEEP 6:7+/l9ia6n1Rtg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKY:7+tkacqLiuWdwRmBEyPb/
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.insta.gram/databases/bugly_db_legu-journal
- Size 8KB
- SHA256 d231220c647d7d9cd884f4553b4497cb5ea2a84e86e805c7451f61914e476944
- MD5 b590062b3ccf03571f682aa4721d053e
- SHA1 c8cb75c9b90e7aedcc39161285e6ba12ada2d86d
- SHA512 87739a4f6685ad406d1508b1a160b17b5bd7246bb49dbf68a3107477a16b831ad7979a7dbb0e5b7702d78b415a994d9ffbf0605a49f29528466d1b058c929b36
- SSDEEP 6:7+/l9DFPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKmt/6:7+tjqLJdTRmBEyPbv16
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.insta.gram/databases/bugly_db_legu-journal
- Size 8KB
- SHA256 732398d5f1172f7a32fd99b1291412d46d51fa40db00f2f7c2011a6ba366a224
- MD5 bee055ee396f4f71e6fab25c44950b50
- SHA1 b1bca5f1cedfa705f638a2eddbe02cce77db09c7
- SHA512 c6f6055fbf627edac0b35bab21bb9d585472f55a5a7d0bc71bd3e2fc6c6462d47761a21a8db876024f25c8ef5afc678f65211b97b2d78110df4980633b532eb9
- SSDEEP 24:7+tVvqLTt/qqn26VnrQiVicXX+MgeRKkYBg72m/mpLwBpGSJ:7MVvqDfrQiw6uMg6/YBg72meposSJ
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.insta.gram/databases/bugly_db_legu-journal
- Size 12KB
- SHA256 d521c703030976d59ba3e017fd5b953242d8a9857cfb22e59a9dcfe05c4bd5a3
- MD5 0d3db29b7a7edaa507a663c8f799add0
- SHA1 363abf55ab478b91c5770a55a456dc2c41ac6687
- SHA512 8b907bdd716db803e247ae207c7b7dbd9972dbce8f33a7b99ff49e02c7ea72a502d9feecaedbc0fcadf739ce570c8e87de7015c127271ce34e6487eff889fe0e
- SSDEEP 24:7+tSqLMvtslqqn26VnrQiVicXX+MgeRKkYBg72m/mpLwBpGSQ:7MSq3DfrQiw6uMg6/YBg72meposSQ
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.insta.gram/databases/bugly_db_legu-journal
- Size 12KB
- SHA256 5f94b1c811846c07840192281e0d94e14180929dbc3d9febe43c6710f7710b4a
- MD5 b2fe7cdf128e674e7aa66ecf53f881ae
- SHA1 3643e39b14e4a1b88212c27bb85f5ba97bf4bc35
- SHA512 7d904637c7948cc19d372b6bcd4ccbd1997c64cf0bf031ba8e105990b3ba3d6a67d43eaeaea6d6fc660eb16c3fb6c8181a7ebaf4d16f0d0fe2ccb692e51bb5b7
- SSDEEP 24:7+tOqLmt+qqn26VnrQiVicXX+MgeRKkYBg72m/mpLwBpGSFln:7MOqzfrQiw6uMg6/YBg72meposS7
- MD5 SHA1 SHA512 SSDEEP