Analysis
-
max time kernel
10s -
max time network
140s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system -
submitted
22-05-2024 17:33
Static task
static1
Behavioral task
behavioral1
Sample
680e0a65835681356ce0200a0175d456_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
680e0a65835681356ce0200a0175d456_JaffaCakes118.apk
Resource
android-33-x64-arm64-20240514-en
Behavioral task
behavioral3
Sample
MiGameCenterSDKService.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral4
Sample
pro.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral5
Sample
pro.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral6
Sample
pro.apk
Resource
android-x64-arm64-20240514-en
General
-
Target
680e0a65835681356ce0200a0175d456_JaffaCakes118.apk
-
Size
28.7MB
-
MD5
680e0a65835681356ce0200a0175d456
-
SHA1
a5ee6dd63cb3d67e7fb6696e4d6f8a0ee599088c
-
SHA256
c9b1a412b256310985b92ced4f8df3d3479fefcbf2fbf4a7282daa14c9a62ca0
-
SHA512
8458372ab40813a927bad733d1e12f57aacd020173087d1bb067bec8471cfb10188e9d10a4fabe596e2b7508d43f041bd56fb8b167bee93fdb5ce17612f0bc63
-
SSDEEP
786432:8uLusBDMIps92NPzrsq4wIb+8nQ0JkZXxusjaS6kzMo+dD5usQB7ky:YsZMiYuP8ZRznjJ6x9jaS6w+dD5uxv
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Acquires the wake lock 1 IoCs
Processes:
com.skyjet.chaosarenadescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock com.skyjet.chaosarena -
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
Processes:
com.skyjet.chaosarenadescription ioc process Framework API call android.hardware.SensorManager.registerListener com.skyjet.chaosarena
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.skyjet.chaosarena/files/gaClientIdFilesize
36B
MD5cbe66956b2acdf8b6a8d9f6316436a48
SHA1ca9d789400a0c30c3c4fb765043cdfb79742f434
SHA256f9f0c95c68186845eb4119bfad21939a269298b0bc1e85aeb97e84f60ff522fc
SHA512bb8681d31cc0a51e9b02371f43f7fb4912670eec92bcfc2a300b11145712041afeef7c0973dba7cd7a9fed74e14d40fefd427bb772ccecf4b92c08dff822e46b