Analysis

  • max time kernel
    164s
  • max time network
    158s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    23-05-2024 01:41

General

  • Target

    6952ddbb0292a9f9faa4aca33fb97591_JaffaCakes118.apk

  • Size

    2.9MB

  • MD5

    6952ddbb0292a9f9faa4aca33fb97591

  • SHA1

    beb6635efa97ade179e4b96e9aa7dff1d34d3dab

  • SHA256

    714accd21efe642441ac783535dd8d55a39d3516e71280afb35346efd911c810

  • SHA512

    a7825e1a69e99f2ab25442a3e810ade0b9b1a304ed41c9114451b88f68728b0e933e4053e1b9d73b6edeb5f097971b79324773034138befca263cadf63129685

  • SSDEEP

    49152:beTFK7FKOytwJFy4OIBXbJZVYn5OSJ+wUeWTdGh/EFYl5AGjTLDernrp6b918rkY:beT0F3Iw7OIFJEkwY5Gh/7l1jzYnrU1K

Malware Config

Signatures

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks if the internet connection is available 1 TTPs 1 IoCs

Processes

  • com.netsun.dazpin
    1⤵
    • Checks CPU information
    • Checks memory information
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    PID:4296

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /storage/emulated/0/dazpin/visited.dat
    Filesize

    3B

    MD5

    e4c2e8edac362acab7123654b9e73432

    SHA1

    e8dc057d3346e56aed7cf252185dbe1fa6454411

    SHA256

    d0ff5974b6aa52cf562bea5921840c032a860a91a3512f7fe8f768f6bbe005f6

    SHA512

    0b3402a678ec2788804994fb2df9faf66eecbdde26553e320a8d4a154f53d840d2a32245998c38f885f01137c9fcf123f3752fc841508dc771fa6faaee689b73