Analysis
-
max time kernel
128s -
max time network
162s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
-
submitted
23-05-2024 22:05
General
-
Target
6c6868812c3476dab272f10b18663313_JaffaCakes118.apk
-
Size
3.7MB
-
MD5
6c6868812c3476dab272f10b18663313
-
SHA1
1de4223fa1a65235f69ae30834c362f108d0abbf
-
SHA256
65f1d1574f859e0a13151ffd8d78e4a68a4279baa31c96d6faf194cabffeca29
-
SHA512
c887a9135f4bcd47f961f6a8e2a105ba3518a550f64a2ba4fbc9f20e76a1b78d8e48c2279e60a523a8782b2d9820df44a0cf79fe5014fe45d33a243b8595a1cc
-
SSDEEP
98304:DFKV8eTeOC6tcBEA5o5S8L4E5fsbDQ/aAiCmNLg:RM8eTeOMBh85qbDBSF
Malware Config
Signatures
-
Requests cell location 2 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks if the internet connection is available 1 TTPs 1 IoCs
-
Reads information about phone network operator. 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes
-
com.baoyi.weixinlingsheng1⤵
- Requests cell location
- Checks memory information
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.baoyi.weixinlingsheng/files/__local_last_session.jsonFilesize
116B
MD5e40bd5c20cc91a39dec8a5c61e459f2b
SHA10ec792d634f3e574efcacbc78cde7850367537d3
SHA2564a12b280d68a53f1bca8b1ae3fcbfdf7ff1b77373ee33dde6f8c8754c8d4791e
SHA512850702a13126e9e219234b7c805d3a6391165aee25eb9e33f9b64f5a737d36006fed6b5d9b7ecec867dade236c7dbbe8c80f65213c4c104303e2dd3a8591ed6e
-
/data/data/com.baoyi.weixinlingsheng/files/__local_stat_cache.jsonFilesize
25B
MD52d805b13f2f28dc3ca9bbcc000f49bb5
SHA19eac165b4d81258fd3967cde5cc53b53b1dabcb1
SHA256c8a6624f390568f0ddcb9841336aec6a564460fdaf6624e562b32935b8956f19
SHA5125db8c57bab36bcf9db698c1dce70318cbffc156dd1d1c1e09e5b7ba60aff07b598ebbf26c4bd8a2b03bd6e59ef2dde2d944a22a8d8a19ecc8378e83afb7c83b0
-
/storage/emulated/0/backups/.SystemConfig/.cuidFilesize
89B
MD5ce8f1aac61ba89ee45b54acf189bc04c
SHA153bddb15676f82970f795778ae2589a42f2dbfdc
SHA256c63829d391ff861c16dbb39795173609507150a1ab6a1c5d5e773aba7051ccbd
SHA5123535c58b8d61eb18a9ff77c7909c1e2c4dcff9a0b28d7ca3ac4581526e19a19069f50e5afbed9d2be4d87bb51c72446d92e065ad73468ce42fe79dc3424fad9f