Analysis

  • max time kernel
    9s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    21/05/2024, 00:14

General

  • Target
    616c210df015b1a092acb84e7eb19fc6_JaffaCakes118.apk
  • Size 1.6MB
  • Sample240521-ajmxqsce2x
  • SHA256 d0e06495bfaf736b7706937a01d1f1022e8aa192ff4be916fe494cab3f1e2515
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Checks if the internet connection is available 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.wdp.skpmad
    1⤵
    • Loads dropped Dex/Jar
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4288
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.wdp.skpmad/files/xio/cqRSpxwe.jar --output-vdex-fd=44 --oat-fd=45 --oat-location=/data/user/0/com.wdp.skpmad/files/xio/oat/x86/cqRSpxwe.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4319

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        cqRSpxwe.jar

        • Path /data/data/com.wdp.skpmad/files/xio/cqRSpxwe.jar
        • Size 795KB
        • SHA256 d66b03b50e1d245b99ef733767494e4373e464b5e5fe6d9e6d19363db72f4897
        • MD5 SHA1 SHA512 SSDEEP

        cqRSpxwe.jar

        • Path /data/user/0/com.wdp.skpmad/files/xio/cqRSpxwe.jar
        • Size 2.9MB
        • SHA256 7da8cf9c8d707d20223ea45a304ed9833956592a949b704318932ed9fbcbe665
        • MD5 SHA1 SHA512 SSDEEP

        cqRSpxwe.jar

        • Path /data/user/0/com.wdp.skpmad/files/xio/cqRSpxwe.jar
        • Size 2.9MB
        • SHA256 a99f45c2732a7c907586f35745bf9ab1211b227c1d81b0a17b4ee8b3593426fd
        • MD5 SHA1 SHA512 SSDEEP