Analysis

  • max time kernel
    125s
  • max time network
    147s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    23-05-2024 08:41

General

  • Target

    6a5f308b5e9d96c442e950e16b8a54fd_JaffaCakes118.apk

  • Size

    5.2MB

  • MD5

    6a5f308b5e9d96c442e950e16b8a54fd

  • SHA1

    b476c1ba304c0a747e6697251de54f218975797c

  • SHA256

    281a6ab22f4a1c58c9ce58d5f9c54429acc05414723e6b050ebbebed8c4f48b0

  • SHA512

    b36ebc7ae0d17f8cefe1499f25edd1b28c8baea6d41acc27a77b2baabfe18417a4edcb7648c024b84e7347cdf0605b04032bc565fd68e781ac31d2367246ffda

  • SSDEEP

    98304:a0IuYK5w9uH3bOieCi7hvdkEptY+q5gBF58xrS0d0yzgaPo:aDunw9+Uhvmw2OCo

Malware Config

Signatures

  • Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks if the internet connection is available 1 TTPs 1 IoCs

Processes

  • com.cric.mobile.assistant
    1⤵
    • Checks Android system properties for emulator presence.
    • Checks CPU information
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    PID:4219

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.cric.mobile.assistant/files/DATA_Preferences
    Filesize

    1KB

    MD5

    cf40a1de3f93b4a025409b5efa5aa210

    SHA1

    c66bf56ddabc2021b84d3ae2755d0ab05ff0c99e

    SHA256

    2da42fb1d7bd8524e83d5a1e332bad697c8769ba430770a19bec630eb8ffcaa8

    SHA512

    a4f042e43d4db61c4ed35d966210b12d9b0afabcff358f4d07691c948c0e308068a5a9a7ee52a7329d78c9d9bbf7e06133d79334e53c9bde3c011c954fabf144

  • /data/data/com.cric.mobile.assistant/files/mobclick_agent_cached_com.cric.mobile.assistant
    Filesize

    100B

    MD5

    bfffc6a57925dab84103a03cd885d40e

    SHA1

    f035eae63ca0936a5c08f3f73aec8be274fbf08e

    SHA256

    47eef4d968ef870254fb7356e2a67d81206660fe1c6e711e5597efc47b3c44ad

    SHA512

    c87cafce8e239d06c38083c776f2d6595dd126e7814714510dfbb04debd850ef44f729aaaa52e5a9b4e552b0584162749f934359acbc64a895f6d23a13d5d2b7