Analysis
-
max time kernel
8s -
max time network
155s -
platform
android_x64 -
resource
android-x64-20240514-en -
resource tags
-
submitted
22-05-2024 13:23
General
-
Target
67677dadb20c91b6d0484981d13628a2_JaffaCakes118.apk
-
Size
444KB
-
MD5
67677dadb20c91b6d0484981d13628a2
-
SHA1
0043144a26ea1e6d6c7ad478e4a825fc852ec93d
-
SHA256
45c0bfaa36dbb9ffa1692a268eaa4bdecd1afd637f1d78bb45581a2cf616c49b
-
SHA512
e8a9ef0268f53fb5e0f48a25085d81d8bd5f665074b6dbf25065850fa35db95fdea863d57ca9e68d99dd780503f08f18f4eb21d368576b426511d2cbc2417371
-
SSDEEP
12288:VWmSUSzMNNVLZT3+4h6Qxq/InYlb+mDfhGcb6j:VtdmMNrFTuy/qkudrhGcbQ
Score
7/10
Malware Config
Signatures
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Queries the phone number (MSISDN for GSM devices) 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks if the internet connection is available 1 TTPs 1 IoCs
-
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes
-
cn.net.rgmnphjk.hpjtks.ptvh1⤵
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)