Analysis
-
max time kernel
7s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
-
submitted
23-05-2024 04:31
General
-
Target
69ba7e06ed234c33a00999e12400e4bb_JaffaCakes118.apk
-
Size
1.0MB
-
MD5
69ba7e06ed234c33a00999e12400e4bb
-
SHA1
c21f96d9d0e6478c5b455c46b2f955de85d7b39f
-
SHA256
9310ccc346f1a28117f61be66a1feec8c340b1b4896ee121ce1da5dc817df3af
-
SHA512
e13474a08690214dd189a2520e50c2f08535accfd5074b00e1650bbe1e00a93216eaf60aa42fe4b18683443a21e0f671b89401e7ccdcc959f6a84e65720d71c8
-
SSDEEP
24576:8Eqs5uOsWe0nW4B32Xif9G8/6ILafmVdArlJE/Hsg0k8OFOwCHagKeI8nYMj2FET:RqOuOsWbz32Xy9G88fmoJMHsZzOFZ6K4
Score
7/10
Malware Config
Signatures
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Queries the phone number (MSISDN for GSM devices) 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks if the internet connection is available 1 TTPs 1 IoCs
-
Reads information about phone network operator. 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes
-
cn.net.rgmnpjj.shljtk.sprvg1⤵
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)