Analysis
-
max time kernel
35s -
max time network
130s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
-
submitted
23-05-2024 00:49
General
-
Target
693210bbb99f6e229e77d06dd8a330ea_JaffaCakes118.apk
-
Size
23.4MB
-
MD5
693210bbb99f6e229e77d06dd8a330ea
-
SHA1
d7d13cdf92092a44b4414d4769dda5ed5119b302
-
SHA256
aa6a1ded9eedeb72a1c8b8149094c1cf97ce38d0c540600ad4fbc138bfc7db88
-
SHA512
2197ec71abdbbdd173d767079d1455e28b025edc873ef1c8482e2079ef4dcb22f27785276b77e47f8229d7c01f79fa674b04a6c1182e1bae85a41717362ecf87
-
SSDEEP
393216:rKy0ZDhvVCBgc2dNS5pbq+xbnh1OrxK7gDcvVRLyWi1YsC+fgaS1aTvVcSJKzpOZ:rcZhvVCGtPGpb7Nnh0KO8ROt1NfjuaTV
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks if the internet connection is available 1 TTPs 1 IoCs
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes
-
com.absologix.navy.commando.strike1⤵
- Checks CPU information
- Checks memory information
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
Network
MITRE ATT&CK Mobile v15
Defense Evasion
Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
2System Checks
2Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
123B
MD5ae4838e45ce09a7a6c384980a94bdf95
SHA175d41e4e732e9d15b94b20906fa3cfb9672698d9
SHA256ead35df08931af5af87aadf88e864f7e8f0c8e88fe44de9058eea967b0695aa5
SHA512f9e3f86988c28f401d7b766394408c4be9de9b27db6a1cbd24ed32de7fafff1058bcf267a141d2e519bf2149ff55696d77be557ec9ba84b63147e680ca189aff
-
Filesize
1B
MD5cfcd208495d565ef66e7dff9f98764da
SHA1b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
SHA2565feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9
SHA51231bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99
-
Filesize
10B
MD5a0f4bccf2f1b0615c2d496e7c204790c
SHA15556af70b9b0f6dd179bdf87f5df81bd94a8eee6
SHA2564fafc618dc543a36a2a6042c1c46a684100a732396fc3cd59ab4d7dedfc0b88a
SHA512eb6dae6df56f4bcc023f5c8132ec540c99aa63b5f599a1edc9c74b4b1f7b87ac7c617cc494fa004e1e01c86c27557e88948006e0c9c574e94de8fc80bd685439