e83905f3e55c767017de18dbfcc85066e8faec40910b54a61a08db5c80863246

Analysis

max time kernel
168s
max time network
183s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
23-05-2024 04:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

69bc03a1d41a928e3d7f458d02e2e44a_JaffaCakes118.apk
Size

4.2MB
MD5

69bc03a1d41a928e3d7f458d02e2e44a
SHA1

f52e6cc6c958b58315ee2a3c5c25047e67039c02
SHA256

e83905f3e55c767017de18dbfcc85066e8faec40910b54a61a08db5c80863246
SHA512

a5a64f5fcf7dd34e19ccccf01a9a2f13141e8e9bd8412ab6bbc2436d713a39f07fc6396768f113fd7dc30ae505dbee72fe6669a2350dde8679586f1efc188e44
SSDEEP

98304:40kGyrLs3ELoZ1w493sb92AHHSBZGRm5kptE0V+:d9AIQI1w4qLHHSBZGQ5kp8

Score

7^/10

discovery

Malware Config

Signatures

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

System Network Connections Discovery
T1421

Processes:

com.overseas_nds

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.overseas_nds
Checks if the internet connection is available 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

com.overseas_nds

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.overseas_nds

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.overseas_nds

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.overseas_nds

com.overseas_nds
1⤵
- Queries information about the current Wi-Fi connection
- Checks if the internet connection is available
PID:4310

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.overseas_nds/databases/overseas_nds
Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.overseas_nds/databases/overseas_nds-journal
Filesize
512B

MD5
5ae09a2c375adaa7382e7070ca1bbebb

SHA1
0264b8b576622b59af7b91b9b2b270074fe0a571

SHA256
a88c2dfbae64d68c52f77c7c59cc2e0d0dc69c4b4df509e3321b111818e82810

SHA512
acfc7f7f24574bcd8a01d7730e1aab225b4187449990de1057b1871ed30732c6f5b6d8ff9858afd3c520a53a8b413148e8e8c38cea63d544018e5d9e22e226c4

Download Submit
/data/data/com.overseas_nds/databases/overseas_nds-shm
Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.overseas_nds/databases/overseas_nds-wal
Filesize
44KB

MD5
af98fbb507667a99d0c31476df092e78

SHA1
c3ea5f68619ca5862fb08d684cc1ae68b5e7b141

SHA256
d3f5627ba0bed72249ac86df984a361be83a2d59346a0942637b1bc844d098a1

SHA512
b1c8f4c87a2dde6f89158ed9a10fbdebd58ccf9c6cf03c3da3d6625b2208f75e5f34072092705eda4cb57b1457ff396dd2da86abdeefd11f3037ba38455662cf

Download Submit
/storage/emulated/0/okCache/journal.tmp
Filesize
36B

MD5
37e8e716e0e2f4a0b05cd9571d95b84d

SHA1
f8d068f6931707bddb8cd69f706f2224ad1fea3c

SHA256
7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca

SHA512
e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

Download Submit