Analysis

  • max time kernel
    125s
  • max time network
    133s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    22-05-2024 20:18

General

  • Target

    687df458e2f4da546296064cb7cc6825_JaffaCakes118.apk

  • Size

    465KB

  • MD5

    687df458e2f4da546296064cb7cc6825

  • SHA1

    054683165e12ebe6a81e675402159e0a68694e9e

  • SHA256

    4f441e910cd3e579882b755a743ccc8328923041a990814cab620798d30da6ba

  • SHA512

    61939415e076ca97634fd4d57178c444370f4458ef51772061bf37938cf12050e096b65b869b5063f3dfd1e09aa1369fd593373d26a600f300e7818a966e3bc9

  • SSDEEP

    6144:Se4rdju2H/U4StDw0LxErY2YYYYYYsFcr+7lY2aHFdWRN+Ufqk3ITbgI:Se4r5U4S1GSFZWH6RoUfN4XgI

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Checks if the internet connection is available 1 TTPs 1 IoCs
  • Reads information about phone network operator. 1 TTPs

Processes

  • com.jeef.WifiAssistant
    1⤵
    • Checks CPU information
    • Queries the mobile country code (MCC)
    • Checks if the internet connection is available
    PID:4234

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.jeef.WifiAssistant/files/mobclick_agent_cached_com.jeef.WifiAssistant
    Filesize

    105B

    MD5

    c6616475a24ffc59b2e0589da06f3e68

    SHA1

    4775e7d514bc5c559601143a0ad53351a04b63a2

    SHA256

    5839d4d96b79623591bbb8b1bba537463c1f669735e1fe8914f175de5ea5ef9f

    SHA512

    361c6f09d6338f147fcc363052afab330d1a9ff850150ce5d4b6c47de037d1f79e03936c57d380bc3e83ddb63431a7f68c16299316d40680e591bd2917e88d0e

  • /storage/emulated/0/Android/Package.dat
    Filesize

    20B

    MD5

    c2c6b0f1303906e2a0a4066fe34f38f7

    SHA1

    f441757de20c98012adda9b21b470571f5776f26

    SHA256

    86b3fd0b6b607704593fd02d28de89376833179eef4cc0e997063fd32e990b7d

    SHA512

    f76c41aa4487e48497220e3a676984ea68ae96e0be34593fd033262f54581cc0fae75a4384ee65cc2c3f50161d0b70b06cdb8e3522f09c46203b63a6f4aec05a