Analysis
-
max time kernel
40s -
max time network
176s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
-
submitted
23-05-2024 12:31
General
-
Target
6af3544eac7d17de7062466eb6b93225_JaffaCakes118.apk
-
Size
14.7MB
-
MD5
6af3544eac7d17de7062466eb6b93225
-
SHA1
a8fc8046c3b554961d9485e5fea7800d913e00e2
-
SHA256
0edbe81c6a93fcf518a33a134041cdd70abab96148924a7e2ed759682c6a71ad
-
SHA512
25c34f07d9149f3e8def37fbd306012b70b7633575d66aceb110aae3fce2777ec8ef139545bae9fc27b0e8e8af5a7b42a1b67d3be74d78f468d4d0d6ed5de64f
-
SSDEEP
196608:oenAGDqTsr3yjzL6cfxfy7wDOqjK5zDzSzqzZzsPfynhrYO1SLcVivCjLqtSma4s:iCq9Ffxfy71IK5veGtASzLqM4BCRN
Malware Config
Signatures
-
Requests cell location 2 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
-
Checks if the internet connection is available 1 TTPs 2 IoCs
-
Reads information about phone network operator. 1 TTPs
Processes
-
main.smart.binzhou1⤵
- Checks CPU information
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
-
main.smart.binzhou:remote1⤵
- Requests cell location
- Queries information about the current nearby Wi-Fi networks
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
88KB
MD5e9dac9e4dcba8cea410959818949e8e5
SHA13f3b1e75b7a045f3a04e344e3decd7713e53a128
SHA256166410c1fa8d1e7495aec3396d9f52087068702ecc7ae0e6c198ec45f7a35bcf
SHA512f14cd7e5f24035e9ae3f2f5be0318e4420354c3ece3dc61babed8a21fc237433a8fedc53b8d32a4a9bd470b00f304e9bad673e3f7d85fca30eb4517f76dd83fd
-
Filesize
512B
MD5a81d348b70dfab451f166de1df87b944
SHA1ea6a3c2544ad471b0a18ad4dcd5b24c6f7ad09e7
SHA256c9799a857f76b7eda051e5e95af1e6566580e181b48bd5e663e7344d471f8821
SHA5121343712b3096a1066eab2e597d37f2e2c839c4830e2794bcbf9321773204d25c9571bdfb731bd5bde10c36faceac954692eca6709d318d4f427a906cbbf50571
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
32KB
MD5c5cad7d38653d70009bb0dcc7092a52f
SHA18bbd9a6355f40b8d01991289a73a3cd898e6178a
SHA256f7722042ac9d56db10287e192bb5088f0602176c35e1503c6d6aa988b0f85c15
SHA512450a0adb188d8f0e1fde70894580a53ed9d90261a9da459b649bbace6d6802f67342399406e14e024cbf73f4be44d7e1eb1c2b960602fd0a61b174082655be15