Analysis

  • max time kernel
    19s
  • max time network
    143s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    22/05/2024, 10:18

General

  • Target
    66ebd45845c6fd22fbe0dc7f224d06e4_JaffaCakes118.apk
  • Size 31.4MB
  • Sample240522-mcaeaabf81
  • SHA256 e83844fabd0f98c30c98901f65dfb657fa8a3bd0e5f6b7eaaafadf29fad1546b
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • com.gameloft.android.ANMP.GloftFWHM
    1⤵
    • Checks memory information
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4317

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        gameloft_sharing

        • Path /data/data/com.gameloft.android.ANMP.GloftFWHM/databases/gameloft_sharing
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512

        gameloft_sharing-journal

        • Path /data/data/com.gameloft.android.ANMP.GloftFWHM/databases/gameloft_sharing-journal
        • Size 512B
        • SHA256 5e106436cd7c81c3326701d1e4fc14268ebf9de271c576b933c2beaeda023a71
        • MD5 SHA1 SHA512

        gameloft_sharing-shm

        • Path /data/data/com.gameloft.android.ANMP.GloftFWHM/databases/gameloft_sharing-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        gameloft_sharing-wal

        • Path /data/data/com.gameloft.android.ANMP.GloftFWHM/databases/gameloft_sharing-wal
        • Size 64KB
        • SHA256 58f0405b560ca45ec4caae6056300b4565b6470cde25da73c6926aba43ac54e4
        • MD5 SHA1 SHA512 SSDEEP

        gaClientId

        • Path /data/data/com.gameloft.android.ANMP.GloftFWHM/files/gaClientId
        • Size 36B
        • SHA256 827aebb70bd01891b6919181066a2ff5ef5be188a9c0c8713f47d3b18e3e45fe
        • MD5 SHA1 SHA512

        gaClientIdData

        • Path /data/data/com.gameloft.android.ANMP.GloftFWHM/files/gaClientIdData
        • Size 32B
        • SHA256 0e4ff5819464c705ac03d74eaef91526d03aaf9b27bdac96c60ed2116bc03aaa
        • MD5 SHA1 SHA512