Analysis

  • max time kernel
    8s
  • max time network
    152s
  • platform
    android_x64
  • resource
    android-x64-20240514-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
  • submitted
    23-05-2024 08:41

General

  • Target

    6a5f308b5e9d96c442e950e16b8a54fd_JaffaCakes118.apk

  • Size

    5.2MB

  • MD5

    6a5f308b5e9d96c442e950e16b8a54fd

  • SHA1

    b476c1ba304c0a747e6697251de54f218975797c

  • SHA256

    281a6ab22f4a1c58c9ce58d5f9c54429acc05414723e6b050ebbebed8c4f48b0

  • SHA512

    b36ebc7ae0d17f8cefe1499f25edd1b28c8baea6d41acc27a77b2baabfe18417a4edcb7648c024b84e7347cdf0605b04032bc565fd68e781ac31d2367246ffda

  • SSDEEP

    98304:a0IuYK5w9uH3bOieCi7hvdkEptY+q5gBF58xrS0d0yzgaPo:aDunw9+Uhvmw2OCo

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks if the internet connection is available 1 TTPs 1 IoCs
  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs

Processes

  • com.cric.mobile.assistant
    1⤵
    • Loads dropped Dex/Jar
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    PID:5096

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.cric.mobile.assistant/files/DATA_Preferences
    Filesize

    1KB

    MD5

    cf40a1de3f93b4a025409b5efa5aa210

    SHA1

    c66bf56ddabc2021b84d3ae2755d0ab05ff0c99e

    SHA256

    2da42fb1d7bd8524e83d5a1e332bad697c8769ba430770a19bec630eb8ffcaa8

    SHA512

    a4f042e43d4db61c4ed35d966210b12d9b0afabcff358f4d07691c948c0e308068a5a9a7ee52a7329d78c9d9bbf7e06133d79334e53c9bde3c011c954fabf144

  • /product/framework/com.google.android.maps.jar
    Filesize

    315KB

    MD5

    4899aca36d1ed747a447dcac0d101a62

    SHA1

    32e43edc0bf3e036683ea8639472e6cd31ab9929

    SHA256

    67a651acd867e046fb4463b31ea584c1468f7243a9d1e2efd34059e8ee2f130f

    SHA512

    50b23dd279a9efba566c6a6523c7537723c0cd6dd3e4871f1cbdb8d5bc355caa3ddea99452b1c8e5356802f812b3768066a9848b93d715bb8bdfa455b704285f