Analysis
-
max time kernel
178s -
max time network
186s -
platform
android_x64 -
resource
android-x64-20240514-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system -
submitted
23/05/2024, 15:54
Static task
static1
Behavioral task
behavioral1
Sample
6b75dc28c2b41397a37440c3cde3af5c_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
6b75dc28c2b41397a37440c3cde3af5c_JaffaCakes118.apk
Resource
android-x64-20240514-en
General
-
Target
6b75dc28c2b41397a37440c3cde3af5c_JaffaCakes118.apk
-
Size
24.3MB
-
MD5
6b75dc28c2b41397a37440c3cde3af5c
-
SHA1
aa179bfa7f5948fdf0ffaff4ab54b551f62a084c
-
SHA256
6a1e18b3e89f839ad328390d9d5b7098f6bae8d9655cbf0bcef6e78f062e1ba9
-
SHA512
25400588711d84e65a9f21aa15976839f7215ab3c4a2777fc8cb8ded4dd219d761266abb4a3a7db97b3630675c986f0e3e1312f53575e5f0a5ea79362a720d37
-
SSDEEP
786432:PiqWTt+RHkaE6qCASb7ZtugnJXBJt/cTf+:Pa+9/xaKCgn/++
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 1 IoCs
ioc Process /system/app/Superuser.apk com.ymcx.mastermarket -
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo com.ymcx.mastermarket -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.ymcx.mastermarket -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.ymcx.mastermarket -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.ymcx.mastermarket -
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.ymcx.mastermarket
Processes
-
com.ymcx.mastermarket1⤵
- Checks if the Android device is rooted.
- Checks memory information
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:5173
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
96KB
MD52cd3bf9309fc322a5dedd5b8c5ea284b
SHA18fab9210bc168bd4168e3785cc3e36da9b5e2b4b
SHA2564584eeff2ed5714e88f63c0304364613b41d40452a00836dc13ca01bc0a1e0f8
SHA51212688877424bc3072b3a835a19cc59c3bc998ae39a68aa43db5fb4e5367432b6d4d7fcafbe6632b9da529ebdae90ce448d7af129a6eede0c3900164cfa7a5547
-
Filesize
512B
MD5efbb55164fb8b1844cf18422fd441d3f
SHA1fa352d8e7b04d363253a9ff8ed0a8bb76ef080bb
SHA256876c6d7665e61c02e1ad5c9bc02adbe5c66aa02e8c4b332181b3d398be8176ca
SHA5124f40f2ce1d90cc761d7617c92e88adab85a9c7c91e64d7019d1b5271c6f8f6562b0d717457abecfb863b6c14f79e671e36c137ebffebf14dbc99f20397beced9
-
Filesize
8KB
MD51c2388fc155c7f69f4585a13ecda3f0a
SHA1b948886ae0d23265c9ad005eccb246e74c01da74
SHA25645aea813e4cd09420b492f88229cdf8be84afb9131e6030e36f13f57c30dc32f
SHA5123e012a894461a9f83eb3806533de0b164b975196f265144736f63cb9ddb8c91026f98d4b941acae09ded071af4f3dc59aa91994e7f2ce37b8fd606a36b65f0bc
-
Filesize
8KB
MD5bbe70a5eca28de4e3764c003fa1cfb65
SHA14f7ce5d4fce2f2c7e52242ace4b2bcfced1c2d84
SHA256471d80c82c39b94b2d6f12d591ba3f8186186b84d7ce2b8efd73da0ddd3d13b7
SHA5122416445cfff3204942ba302ec6da3687c4aa0860c35d52f37c93231ae405f1762321283b1ee771fd2f074b1037aba9a12ae99bc6f1b68b08cb6a8b48835b5635
-
Filesize
8KB
MD57f7ed883f68648f32f7d499d57eb077c
SHA1b9636864257906ea9911baa65ac3d58cabe3d620
SHA256080663f4089970ebb14a7c76aacbd5b2d235fabcd5b83ecdbd26e4bcfe6254d3
SHA512850ff811b2542b100a3a2d7bf6bf90d7f5f28dbfa4e7c1bf3dc418fe783cf8eeae7ac9a044d3c9843195dd707e40e43da79f823d20c83122702533dfacd809d1
-
Filesize
12KB
MD5dc163c0b91913e89c112105b567759ce
SHA100b6ffd3d433bca79e55d5544b5d5e52d37878ce
SHA256b6b44d7a1490fae6a0002de5e9316c19e5c007db9183ec21a040f29eb46de496
SHA51282974f096c7ad7135327330fb0dd6419d8d605cb01877830a6eb973fcf27cd9249fbb51cfb24f14cf59823e310ca188f8ca9fede113a917a718242ca2a7859fd
-
Filesize
12KB
MD5f89cde6e75a5adc3e12ba3777e96bee9
SHA19dae335c2ac4d30b888229adeac3af0a17b64392
SHA256d7b9041f95eb933ef6a4a2fd83ab5ae5bb3b2894c26974e30e4486dfbf5ffed1
SHA512eb88fc958374650535e66f110da537e4a89cb398459fe4789ef1fc559309b2dfe4a5a302aa0083ccb6d095b6acf12809a4496b4f97b95e3bba1260862d3b4806