Analysis

  • max time kernel
    25s
  • max time network
    155s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    22/05/2024, 09:25

General

  • Target
    66c9c2f489654bba512b837783e302ac_JaffaCakes118.apk
  • Size 351KB
  • Sample240522-ld5fdaaf91
  • SHA256 7851e04754c8797abd29e2e5d2c7f265e0469d33815b0cb70490537631773b5b
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • mark.via.gq
    1⤵
    • Checks CPU information
    • Checks memory information
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    PID:4333

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        via

        • Path /data/data/mark.via.gq/databases/via
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512

        via-journal

        • Path /data/data/mark.via.gq/databases/via-journal
        • Size 512B
        • SHA256 46f29f6d0c7dfdb1e4f521030bb7ab00271d62192ce5070150e3b17a709de1c2
        • MD5 SHA1 SHA512

        via-shm

        • Path /data/data/mark.via.gq/databases/via-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        via-wal

        • Path /data/data/mark.via.gq/databases/via-wal
        • Size 40KB
        • SHA256 94864fba9f7fd610bf1c01c0a63775d862e519c1cdb66dec72f34f94050b5c6b
        • MD5 SHA1 SHA512 SSDEEP

        about.html

        • Path /data/data/mark.via.gq/files/about.html
        • Size 1KB
        • SHA256 1623f8e485b5be3591c5e97abd6525e1c3d5d66ebd71906aa2afec38594c9eaf
        • MD5 SHA1 SHA512

        homepage.html

        • Path /data/data/mark.via.gq/files/homepage.html
        • Size 3KB
        • SHA256 dd585710bc352eaad39344010cd11a10d8754828c419373248210a5fd87568b0
        • MD5 SHA1 SHA512

        iflytek_cached_mark.via.gq

        • Path /data/data/mark.via.gq/files/iflytek_cached_mark.via.gq
        • Size 69B
        • SHA256 6f8c9662503ebed740bb246d67f11c5c97de7e1ddeaca9320a5a56fc5b9cbf7f
        • MD5 SHA1 SHA512