Analysis
-
max time kernel
7s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
-
submitted
22-05-2024 08:22
General
-
Target
669f75912bcf9479e422717333d57e6e_JaffaCakes118.apk
-
Size
637KB
-
MD5
669f75912bcf9479e422717333d57e6e
-
SHA1
38d048d7692a3b9cb576a35d9b0d1a05ca4b96af
-
SHA256
fe4c2338651b29188135bca69f4099e15267e1323ac91df124396314bab69923
-
SHA512
129210efddb7284a5e972f5a6238a0e28bceb30092d2890a6fecfe95a32ef248124558830429767cbc175b539fa8a8d6c0e78b48ddb9ddcbb4f35c91faced011
-
SSDEEP
12288:i7CJFrjndITBkvvoRoj7Edwk+XCtryrVRjKoR1UK+3/JUgb1EaR46Ku8Dq8HJUYU:i7CnrbwkRnEwXXUyrjjKoF+B5yaR46KO
Score
7/10
Malware Config
Signatures
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Queries the phone number (MSISDN for GSM devices) 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks if the internet connection is available 1 TTPs 1 IoCs
-
Reads information about phone network operator. 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes
-
cn.net.rjmgpnju.hqjtkt.prvt1⤵
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)