Analysis
-
max time kernel
63s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system -
submitted
22-05-2024 17:53
Static task
static1
Behavioral task
behavioral1
Sample
681b10db9feb43c1da1cbac0a81fd195_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
681b10db9feb43c1da1cbac0a81fd195_JaffaCakes118.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral3
Sample
gdtadv2.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral4
Sample
gdtadv2.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral5
Sample
gdtadv2.apk
Resource
android-x64-arm64-20240514-en
General
-
Target
681b10db9feb43c1da1cbac0a81fd195_JaffaCakes118.apk
-
Size
10.9MB
-
MD5
681b10db9feb43c1da1cbac0a81fd195
-
SHA1
25e8baa5433c2657082638d5a6abd5a735c04a4c
-
SHA256
2fab85457935f7da9c8dfe30ba4e7faf28a38c8ef6ae56ccee4a13d115541e12
-
SHA512
60af10603aaf31d7c8c75d3260eaa56010fd054aec64a1e7c827a4786b6065fa8a647f3ac989498900079c6c1067b702b09e4331a68fc080f28a3c6b7b435714
-
SSDEEP
196608:rUNL7MAc/9c/Y81xrzBDDhtkOIcH2L8Dl1mFdF8d8F595O:r9lcrxvVDhtkQHFWb8d8F59w
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
Processes:
smskb.comdescription ioc process File opened for read /proc/cpuinfo smskb.com -
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
Processes:
smskb.comdescription ioc process File opened for read /proc/meminfo smskb.com -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Processes:
smskb.comdescription ioc process Framework service call android.net.wifi.IWifiManager.getConnectionInfo smskb.com -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
smskb.comdescription ioc process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone smskb.com -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes:
smskb.comdescription ioc process Framework service call android.app.IActivityManager.registerReceiver smskb.com -
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes:
smskb.comdescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo smskb.com -
Reads information about phone network operator. 1 TTPs
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
582B
MD52e1a94742ad6a747290b45f0a8ba7d2a
SHA1c45761e27ecf190c68b1e46bd0aa3d381f131b01
SHA256fd6750d72950aa2a1fd5048219db39bdef29691130bdd3f6b94c509213d97255
SHA512b56bf8a3834249ded272adfe2f43188d82f3faf32fe92f6dfbb7fcc82b22c100e334b336d3df4945156989215c54b54b80b230c9a431518e13640f2fe76d93f5
-
Filesize
310B
MD50a9509986f01484669c512261379e88c
SHA1a3a08aff36b38822fda175af2ae10f7c7f924e50
SHA256010836c6959e364550ffd4832602c9a1e4b8069f7fa77bc9aa80c15180a095df
SHA512fa332a933fe20f226cf7918c42438b17aedeb0f8e2768a9f6a3e7b841b1d5a25b7e292c128f1f2ea365f8ff8d281e770304032f93fb1c5a53ab30503b411792a