Analysis
-
max time kernel
19s -
max time network
173s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system -
submitted
22-05-2024 08:11
Static task
static1
Behavioral task
behavioral1
Sample
66986182216f747b747bc856d9be2973_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
66986182216f747b747bc856d9be2973_JaffaCakes118.apk
Resource
android-33-x64-arm64-20240514-en
Behavioral task
behavioral3
Sample
runtime-dex.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral4
Sample
runtime-dex.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral5
Sample
runtime-dex.apk
Resource
android-x64-arm64-20240514-en
General
-
Target
66986182216f747b747bc856d9be2973_JaffaCakes118.apk
-
Size
21.5MB
-
MD5
66986182216f747b747bc856d9be2973
-
SHA1
6ec45f61465b0e2ef5b958d5f8bdbd4ccf79c7b3
-
SHA256
f31e7e71738780482ef9ecc0f597320688e1f5ff05d135b7f050e9cf8b079dfd
-
SHA512
d65ffdfcbdc92eea0feafcf9326c7858f68ff2877c9bda072a2a7b093921a895e6fccb9fc6d3c5a10f8905c7f322bbfc90a4d24579b203be355eeee23470770b
-
SSDEEP
393216:nZuHDN5pa2LZaiTTbWXhb4eBpXUNrB+4pfa1uz4gh7m985ZFLkgQ:nEDNzaGZaiTWRb4ev4BTXh7m6FDQ
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo com.tdmxcp0814.vivo -
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo com.tdmxcp0814.vivo -
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.tdmxcp0814.vivo -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.tdmxcp0814.vivo -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.tdmxcp0814.vivo -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.tdmxcp0814.vivo -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.tdmxcp0814.vivo -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.tdmxcp0814.vivo
Processes
-
com.tdmxcp0814.vivo1⤵
- Checks CPU information
- Checks memory information
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4356
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD57ddc6869a42b7a41a16ae06d70b077ee
SHA1231a95f137437d031cea0d8678fceb5029078e41
SHA256fef38af53dea7a38de19ef299c3a221bd4e1b12fa477efe0fee04792ce9a380b
SHA512d4ffadf0a14a512a8b13ed0009a37d243a7e367d39667b7d3893c229fd5f11f5665a54b0870beeaf831b8e233f1d467177e0197948544ed393a0e5fb1b944505
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
48KB
MD540840885397d2761077a257e9853ceb6
SHA17489c5020cc76c858cd442adc5459cdd3f6d4514
SHA2562e6e223731ebc73c455f9c2c0d653d418a277fe8f6466c1325a8764641e92d6a
SHA512f840409da36a7940329e95ee0ddd02f3264d55585d179f1b0833e2d491c375af5c594ba3637eaf96c54ca3b3ba6ca591bfc179a130f0cfe18c9472477eead96a
-
Filesize
512B
MD59f4482e271bbd61aa9b2f1acb4c1eb7a
SHA12cdbaf2b7bee519ef823c0aff8199bff51820913
SHA256f68d28caf3e302eb59fd90641940f6a1364f22aeb0e121bc4b2c6a9eacda4210
SHA51253b831436639325b39d2a9a234650e95a2eca5efafe02ba5ffd8d69ca2cbd96e6d4f4ae81a5a5fe2a699c92bd29255c9fd6760519a4c520d77b1defc5f2d798e
-
Filesize
68KB
MD52b177970c84b2f85999093c10ecbfd39
SHA1dc6b9fdf57df9a031ff82b7eac976643603c288a
SHA256ca2b7dffb84e5b2aabc058d895fc9db057dffe55d395acf6fe9e6c4d04d9fb90
SHA5128512d01469ec629f9f9cd6fec09aca97bc8a9da1703bedadd2045ee99728045c5b6d90dbb4c31190d2f3184a94cfffc66ad68808c8555e798c071521bfe93d74
-
Filesize
512B
MD5d62f3024cc16a068cd134c50e3fb5c38
SHA1802b1eb4422f7a2f234c9547918782921719d5ba
SHA2563e3fb851863b683e39d4c7e2c4d219d472a1c7f0811690864cef5f76b267de24
SHA512a3359873215bd47d208e84464bda73b3eb7ad25461304ede269fd30e3f863dffcb13bdd2af87cf0ab2580f9a67c77a44b72ea02b14ff62d48a1ceb163bfebd07
-
Filesize
16KB
MD512491a0efd17663c8853235a761d492f
SHA18b0cebb9e9702d5932f1183d1c8ee6b69f800936
SHA25686e9546a3c9bb5a4af7195d93ac231c729bdd1540b29f3246f89071c1cbc354f
SHA51283cab28cee4075ad5d04da02e1268cdfaec3102347cc6b0249377b5224680e65e05b2f07a5a77b6063c8732910f8ea8eb53dde661edead0b5ecaee2f8a437209
-
Filesize
44KB
MD5d208995b98380bf8dcd015db32d47747
SHA1cdd3c85dcbe7405010bf0cf2d1561f16a757ad6f
SHA25651a1058174abc855b7a07d4bba30c734fef68a7158de74dbc0b7c276a80c067b
SHA51266b4daf2fdcbc85961764d55792947dda47d65649cc26e12dc206735a10e240300969abe4cd0ea7797f9e1bdcb18c368a54bd45509e429c27db93b36ae0f53d7
-
Filesize
111B
MD56072b31ef80b972e5c644880c65a6a3c
SHA1b0487c23ba17e4088ae472d67e9363c262e6f140
SHA2567f99f4ff72e82261ab3b6aa1103e767b982700a37c21d6e5220dcb05f661a514
SHA512dbd01e35958cbf7a707fd2b75874a7b30162704274f1db30dcde019647452d7ed9d89db6fbff933aaa642e5d995f5442ad7e341074938adfb9a819db4c02f606
-
Filesize
213B
MD5b58ee3243a3665c1acf7bee677a59dc0
SHA138dbe4d05b02b478293259ba768a0885b6f7665a
SHA25626965976b87f3c2c025c60674047b45249e559115d0bd61eaacbc88a13677e8b
SHA512ebb4de6f7cc62733918fb224eb1d97676eb248d4488eb60e70594d9f4028ff4b06e63c605204d889456e4446f977fcea66273e9c8ae7433da2d6193c11437f08
-
Filesize
65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
-
Filesize
111B
MD50c4a60c50ba8759abd2d78aed6f9642d
SHA156dbd41731458f5854d93caf0d797e820b36b7fb
SHA256a62dd913164bd19634f988145f13e57df3b1504588e53899dc1bf964f3b8aaa2
SHA51250ff18c5aa971a46863bea8d5da25f8031d32c55cfb22c12314367ad5e9b690549d40ae00bfc4186fceb5553937bef29bf922a26efc1f657567d3ab843316796
-
Filesize
167B
MD52e8f777582501e2ef70dab9cdee53e23
SHA1500920820a4e124aa36795016e2762128e35a6fc
SHA256e66cbc818613cddfe804a3c861ec3f98517122e3d8758e5de21c74cebfc1402d
SHA51214b89ed8baebaa56a5419bbdf43d9bb4a5afc38ce429b25da9560db77a4bba8b77fbf3252ee7315426a99f046c4b99f9496ec8488647a8387359ded8ed955a73
-
Filesize
56B
MD53fedb2cffa7fcd5fc4099e28e95fd859
SHA16663ab4f8dba36a9d44e16613b66413a6f12fad1
SHA256756d8e014c5d43ea0f626e6e015d391f955604a2d50c39841a50f0ae707a5880
SHA5128318bc51d85a8a382e5f456d4f8d3d693e8101fbdf9124ed548225fc45dd06b39e77f3c077233647d6f68eb9cf27fca8fcd2db5dc55340d83459beefe949ab63