Analysis
-
max time kernel
153s -
max time network
161s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
-
submitted
23-05-2024 02:41
General
-
Target
697a6472ed5f06d54b42064e5e6850f9_JaffaCakes118.apk
-
Size
2.3MB
-
MD5
697a6472ed5f06d54b42064e5e6850f9
-
SHA1
20a9f3b505707157cf6c4408c6c66de0c2b47e09
-
SHA256
db0a1bc3fd2329470b9ba4df85badecd3cba7b5ac997f3c04e7f4a1dc1faaf73
-
SHA512
7c7a3a32f4af5a23bc94479e9ab76caaca2bfd899cd973f4cfef90a61855c23c96f50594b88e1002e787eb0c94f0411abd6ffdab00bf72cf8dfd921540d11355
-
SSDEEP
49152:tzZSmIi856LJMe39AsDzX90b6AIoBN5/NNyf:vvIiDyP2z9dLoBN5yf
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks if the internet connection is available 1 TTPs 1 IoCs
-
Reads information about phone network operator. 1 TTPs
Processes
-
com.cyou.cma.clauncher.theme.v591975b04f1f6705f128bbca1⤵
- Checks CPU information
- Checks memory information
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.cyou.cma.clauncher.theme.v591975b04f1f6705f128bbca/databases/http_auth.dbFilesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
/data/data/com.cyou.cma.clauncher.theme.v591975b04f1f6705f128bbca/databases/http_auth.db-journalFilesize
512B
MD538a11d4a461986f2bee45c9cedf0e1f8
SHA1280d6ca0cf6d2413bc739167b97faa52904f832a
SHA256c043b21e1f3bab7a2fbd542634f824741692f1229feb7b6861623aeaae4b3cd4
SHA512d10ea36b379bdee9be766840ce0f4a7ae08f29b907c5c8b89adf47e82803c6d20c1f951a64059c2542e82d1ba7ccac8a11bccae32e0ae42d6f18e4433e21e109
-
/data/data/com.cyou.cma.clauncher.theme.v591975b04f1f6705f128bbca/databases/http_auth.db-shmFilesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
/data/data/com.cyou.cma.clauncher.theme.v591975b04f1f6705f128bbca/databases/http_auth.db-walFilesize
32KB
MD50d9333f4b472871c5593666f0a249742
SHA125dbcbbb7bf247612739f1caae5a17c3eacec384
SHA2564aa530e6c4d88c9375fd4b71b38daa7b090ef2f2fe73baf08de43a888b0984b1
SHA512faa60d7f2d2baccefc52ba6b39a1faa22bc2bfe99bcccb76a72a90bfede9c15ae44e4b074c40caab8eeae2f4c61800c88fdbb05ae0cac98a68bd7bb55cd5bef2
-
/data/data/com.cyou.cma.clauncher.theme.v591975b04f1f6705f128bbca/files/.imprintFilesize
841B
MD5bf5fdcce139b2cd662aaeeaa224b5b69
SHA1306d486b4f394c74b37124470716ccb69ba03c7a
SHA256ad9134c78134e0718c9e202ba43d54634f312b3b954877c06a50453f8fe2c4c7
SHA51244432732c94e1af63dbdcb596532af499c07d0651b8833fc6443ac957eeb6245439765d11ed90b04d7c2836b52ae50cd0cb5f11a0e5857783f0fafcbd117fbb4
-
/data/data/com.cyou.cma.clauncher.theme.v591975b04f1f6705f128bbca/files/uuid.mdFilesize
32B
MD527f29cfabac9bfa4cdb682d4b5b30f62
SHA143dd812116731ffe8f7e6cb25b2e2ae198214912
SHA256ff819c1c25b5a1ad8aae40594c4314f90ddfea6f185c4ad1522419b5aa8a9b5a
SHA512b3dc3045b442ec612874300d794aea660b173c95bb218123bb1cec6ccad5fa06c267a723846edc6979b725d8f1b03ed42ad2144197da7a1af1a141212cfb491c