Analysis
-
max time kernel
10s -
max time network
147s -
platform
android_x64 -
resource
android-x64-20240514-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system -
submitted
20-05-2024 16:21
Static task
static1
Behavioral task
behavioral1
Sample
6007a132635358382f82986da6f175e1_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
6007a132635358382f82986da6f175e1_JaffaCakes118.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral3
Sample
gdtadv2.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral4
Sample
gdtadv2.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral5
Sample
gdtadv2.apk
Resource
android-x64-arm64-20240514-en
General
-
Target
6007a132635358382f82986da6f175e1_JaffaCakes118.apk
-
Size
9.8MB
-
MD5
6007a132635358382f82986da6f175e1
-
SHA1
42915886874f566f0516d0e97f543d2eb90a1e26
-
SHA256
c0eda9b699ffc73231296cd220b1b5314632db7625983790adc1f6842ed8a8fd
-
SHA512
120e640a329e08353d558bedc3210f93580ad11f0394be7f9224af0eb5d878e20f9ac45399d610ba85c7f6236f6f104a988d892563e2a91b35774bfee4bcbcfa
-
SSDEEP
196608:PCjVH0HW5mwtdTLI3dJ/Kcet9DvrKUC9JIcynJYboWHvczMxfFJrOEh:PCjiwtR83dJyRrqD6JuczMxfLrp
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.lt.bc.mb.mrmfxs/[email protected] 5116 com.lt.bc.mb.mrmfxs /data/user/0/com.lt.bc.mb.mrmfxs/[email protected]!classes2.dex 5116 com.lt.bc.mb.mrmfxs -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.lt.bc.mb.mrmfxs -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.lt.bc.mb.mrmfxs -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.lt.bc.mb.mrmfxs -
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8.2MB
MD5659a4b3d6a27e90b63737d911839d2ad
SHA14a03dbe1057d76f1a63f010622ab25d06ba9efa1
SHA25685fc91a67de9e9af75ce2b118ac55df9dda2dd250c3007f62fbe016eddada268
SHA512dfeac12a3b2c2b32370fa087dca18a6acbf343e89359f5fe30390e0a96758fda15d197e752de856f55a51b801cc8d2fb9970ca2781d59a1c230fe11a6f861747
-
Filesize
455KB
MD5e5a53000766ebc433b27d6a66ec4f555
SHA12c8f53f1c03aec2005bcad67d731f07261dabde0
SHA25678e4ea857f10c2df6c7b94f0584524b52ecc099ed29478fe3964037b8a86ed2e
SHA512370a1cb93b14556ad861724f4e9995c9a4c6d37cf2d570f888d1c6000c66d27ac63496b0703361e9fc9bc7f309b7aa4407c5f339d186b0a5b72520d23d04b68d
-
Filesize
340B
MD5ea845ab63999069184b24b43ea8a4aa0
SHA1fc4e3a4e220b382fb024704d5d23ee3ed6fb1da2
SHA25632929464ce2246c2fd6ee794e6dd7130116dd0075acd15e7f96e3e7d617ce6b0
SHA512ba738b3364e0eaa32d9a81ed9ba112fdb61666db132eeaf2b4d11eb2eefb546513e102a2056927f00635e68de8f8f77317ebe6cd669b4ae931b6bee7c73afc04
-
Filesize
314B
MD5e014bfa5c170e5bf68e6bb257d806e65
SHA1f2fcbb1d7da80dba2154ba35d775dcb323823621
SHA2560a1ad123060a259556d8180ea6af89c0c458b1497741ec95c9144a0890da50bf
SHA512df079e658119824a06e82a2efe86e6c890150f8b312ae0096cea3fa419df0b34530985956effdd8020e5050cfb66f8d948bd0ead1a2642b9c12521bdf8df302f
-
Filesize
27B
MD54903f95b241095650c8398eac39ab2b5
SHA1389bf5fce2645bf97ff866a1dc4e758bf8277af6
SHA256e285af03bbb5f227860a1fc1507dbd572ddc1077b46c9d9f735ec0dcc0927b31
SHA512b8a0b0efaae32bf15f88787641587dc0aa4acfc1f43a4f18246f57d4c580d37f3d0de45d0dc2eaf88c9d36e1aecabf565a16a854800d7ffa7c4a9b1dd1745097
-
/data/user/0/com.lt.bc.mb.mrmfxs/[email protected]
Filesize6.7MB
MD546f2fb56792aa561c948d7f9b275d314
SHA18df46a944ad380091a2521f0eb2f568bdb9d8437
SHA256021096d9a1ef0af91698baf5c93b67d962bea5e2408c4508606bf7e7d77bce0d
SHA5123271a5dd1c53e444367703b27559873cac55d84187c1af5d0a765c6fe9772ab6ab8290b5b2938768a0f30237d62f24e70dfd65efd01ef999fcddd46904026dfe
-
/data/user/0/com.lt.bc.mb.mrmfxs/[email protected]!classes2.dex
Filesize7.3MB
MD5ae30b743a41d6a36ea99d3039a365aeb
SHA1a798e87f27289bb7fdb4479ed306b383f5c15f07
SHA25622287c8b377c346669d0961baf340b90a2d78daa98c2c8837470a59bcc5072b1
SHA512d3c18ace4a3b99de23f7b7b558deb4d582120984b5a8d05d2e21e7b08b877c92d251b5073b27afbac3f0279f5fff528ebf1ea84ea0e1a422771b6e6cd6655e3e
-
Filesize
48B
MD54c4c5285293d5141f582aefa4e038669
SHA1e01852a72e5a8e6f7d63a21426b515118196047b
SHA25636c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731
SHA512097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399
-
Filesize
32B
MD58aec016f9fbd1f51682262189b73ea04
SHA1728abeb62d52d5dc25df80ee6f11d6bf338ff555
SHA256b7b5712440ac05ae21f71042beb9ea50fa7782ceba22e5941d8d9bb171e8d4cd
SHA512726f7e72a148af3a29ffa72100331941562ff0cfada2e5f5fac04d4b2725e7b71e43d8c97f48e6a6da1e9254e9bd9b6ba5a323930f9dc4dcd64609b712247deb