Overview
overview
8Static
static
6743c7b981b...18.apk
android-9-x86
7743c7b981b...18.apk
android-10-x64
7alipay_msp.apk
android-9-x86
8com.skymob...01.apk
android-9-x86
1com.skymob...01.apk
android-10-x64
1com.skymob...01.apk
android-11-x64
1com.skymob...17.apk
android-9-x86
com.skymob...17.apk
android-10-x64
com.skymob...17.apk
android-11-x64
Analysis
- max time kernel
3s - max time network
159s - platform
android_x86 - resource
android-x86-arm-20240514-en - resource tags
androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system - submitted
26/05/2024, 03:46
Static task
static1
Behavioral task
behavioral1
Sample
743c7b981b95dccf79aebaf29c7d0d8d_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
743c7b981b95dccf79aebaf29c7d0d8d_JaffaCakes118.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral3
Sample
alipay_msp.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral4
Sample
com.skymobi.appui.sole_v1001.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral5
Sample
com.skymobi.appui.sole_v1001.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral6
Sample
com.skymobi.appui.sole_v1001.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral7
Sample
com.skymobi.pay.opplugin_V2017.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral8
Sample
com.skymobi.pay.opplugin_V2017.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral9
Sample
com.skymobi.pay.opplugin_V2017.apk
Resource
android-x64-arm64-20240514-en
General
- Target alipay_msp.apk
- Size 354KB
- Sample240526-ebxjesee36
- SHA256 ee3c608fff51b313f4e0b3e542bedccb4d4db4c8eb44e63bf4be0d468e9ee117
- MD5 89c04e1ebcd58eca6dd93211628ed0bc
- SHA1 7d1e77ce25a635299704dbd95bd95c697572ea9d
- SHA512 3dccaeff9906401855f3071c91012926d7e9250674ea0bb89606e4862223a8343fc7b9369afe4e50031d261b45437107c018f565da5615c49721c3bf1bf6ed01
- SSDEEP 6144:cH8LfOo+BjGVN8TdW4zxgnm1Us3JuOK2vf5C8EcPK+WvyQcQ2fnq7:cHLxBiVN8pWggmlY25CLE8RcQ2fnq7
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Requests cell location 2 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.alipay.android.app - Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.alipay.android.app - Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.alipay.android.app