Analysis
-
max time kernel
179s -
max time network
161s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system -
submitted
19/05/2024, 05:05
Static task
static1
Behavioral task
behavioral1
Sample
58ae983abf45b54cb53fc68a36bc4cde_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
General
-
Target
58ae983abf45b54cb53fc68a36bc4cde_JaffaCakes118.apk
-
Size
31.1MB
-
MD5
58ae983abf45b54cb53fc68a36bc4cde
-
SHA1
b46067f48b1d97b8ad054c4e72593d53003efa79
-
SHA256
912c5423192cc9c5a39729b362b17f16ddf1d6342274a3bfccb60deddc472fcb
-
SHA512
7951cacdcf4ded9d09beca44d34e5f4b12eed5217db3106dbc6c2549bffae64b6597a8b126b86e89ffa2a6d29817d778d43157061ae6b492c39b59d32095dea3
-
SSDEEP
786432:4s0T+VCimp7LXjW7BTqMh80Zc0f/01FS3AIhAELLw2kwcfAZur:4+M5LXa7IMh80Zc0XAFSQIhVkXr
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo com.chillingo.megadeadpixel.android.rowgplay -
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo com.chillingo.megadeadpixel.android.rowgplay -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.chillingo.megadeadpixel.android.rowgplay -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.chillingo.megadeadpixel.android.rowgplay -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.chillingo.megadeadpixel.android.rowgplay -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.chillingo.megadeadpixel.android.rowgplay -
Reads information about phone network operator. 1 TTPs
Processes
-
com.chillingo.megadeadpixel.android.rowgplay1⤵
- Checks CPU information
- Checks memory information
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
PID:4293
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
43B
MD5f9cd5b7804b18340eef3da6158e5b043
SHA112d3676eeb547ec8045ba930577b32559adb5c3e
SHA256978e8255bf3cc834fa01e8ee2351cc0dd3be3f0d675b064414bbd690dc8a1de9
SHA512fbaff50c54a31d1f341321f797cd13b6d4c9aeff69dbd99090cd3b89056abf54830e37385cfc7adfb271eab550ac982939efdb926a7fdb3c601a82542db48817
-
Filesize
469B
MD5d4db4b573089391ca172c9b0d69c8f8c
SHA1464ef9b21fd65414fb8903786d951693283f4c20
SHA256dff3dcda14de3dd39ad4995279e7b0e30fff7789217d03ac60fa80f5ac546561
SHA5127ad13cb2a3b03d5ba3a67c00be474279ecdb92b1a37dd760edc33ddd3fbbd8cab126e04b4477555ff50683749cafe19d548a294802c25d1ac26886480693c784
-
Filesize
605B
MD584626d8c75d83891d048e6f0bdd6c5ec
SHA1eca6d6711b1e59174d59be954875a40e3198bcd5
SHA25607aa73b6d4d9327ddeaf1dc8a65a401bf54b4673f60f6e74aa8a3bd4b3dc00ec
SHA51265117eb00ee44581ccddcd1c19ad8323c8a18f9dcdff67db31d89f1fc7216b15abad286d918f41a09d19f776c5a4ca8584d089b86ff42dae3a6f6dac7d72af0e
-
Filesize
4KB
MD5def03d1f79ab4446c69fb87f9d4315f3
SHA1a96304a40fa6f341fa6636f577bf5b746a985da5
SHA256a17ec48065f2668d441d2a94878d5e6572df6b2f37a71c575995d5cd5abcda76
SHA51289c1b6697bcbdf2ab699c8644e457b51081a649ed98f936c0df8fa2d131c3b6572b9b288df0e21b26cc846762321c349f9c7ec9fd7124e59e826495da5ab68f9