Analysis

  • max time kernel
    10s
  • max time network
    140s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    22-05-2024 17:33

General

  • Target

    680e0a65835681356ce0200a0175d456_JaffaCakes118.apk

  • Size

    28.7MB

  • MD5

    680e0a65835681356ce0200a0175d456

  • SHA1

    a5ee6dd63cb3d67e7fb6696e4d6f8a0ee599088c

  • SHA256

    c9b1a412b256310985b92ced4f8df3d3479fefcbf2fbf4a7282daa14c9a62ca0

  • SHA512

    8458372ab40813a927bad733d1e12f57aacd020173087d1bb067bec8471cfb10188e9d10a4fabe596e2b7508d43f041bd56fb8b167bee93fdb5ce17612f0bc63

  • SSDEEP

    786432:8uLusBDMIps92NPzrsq4wIb+8nQ0JkZXxusjaS6kzMo+dD5usQB7ky:YsZMiYuP8ZRznjJ6x9jaS6w+dD5uxv

Score
7/10

Malware Config

Signatures

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Acquires the wake lock 1 IoCs
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs

Processes

  • com.skyjet.chaosarena
    1⤵
    • Checks CPU information
    • Acquires the wake lock
    • Listens for changes in the sensor environment (might be used to detect emulation)
    PID:4310

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.skyjet.chaosarena/files/gaClientId
    Filesize

    36B

    MD5

    cbe66956b2acdf8b6a8d9f6316436a48

    SHA1

    ca9d789400a0c30c3c4fb765043cdfb79742f434

    SHA256

    f9f0c95c68186845eb4119bfad21939a269298b0bc1e85aeb97e84f60ff522fc

    SHA512

    bb8681d31cc0a51e9b02371f43f7fb4912670eec92bcfc2a300b11145712041afeef7c0973dba7cd7a9fed74e14d40fefd427bb772ccecf4b92c08dff822e46b