Analysis
-
max time kernel
154s -
max time network
178s -
platform
android_x64 -
resource
android-x64-arm64-20240514-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system -
submitted
28-05-2024 18:56
Static task
static1
Behavioral task
behavioral1
Sample
7e0671fc66f9a482000414212bf725e3_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
7e0671fc66f9a482000414212bf725e3_JaffaCakes118.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral3
Sample
7e0671fc66f9a482000414212bf725e3_JaffaCakes118.apk
Resource
android-x64-arm64-20240514-en
General
-
Target
7e0671fc66f9a482000414212bf725e3_JaffaCakes118.apk
-
Size
833KB
-
MD5
7e0671fc66f9a482000414212bf725e3
-
SHA1
5c6c19a5820a9c799332155d366c2cd31a2e0be1
-
SHA256
13569bc8343e2355048a4bccbe92a362dde3f534c89acff306c800003d1d10c6
-
SHA512
785d914c9de6f9ac0da3398d7edc9ce110b07a25572d08b3cf8fb19fcc15a9dd625fd47d3fe6da08f975b5726f1aaf2d1f90435153ec2b1d03963fa9065e79f1
-
SSDEEP
24576:gnHCL7qRbyZKskka9P5RZo/k022dEvP/KjP15Ibe4D:AMuR2ZJk89jPLIbp
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.tvone.untoenynhioc pid process /data/user/0/com.tvone.untoenynh/app_fogdqxpss/puqiklllaj.jar 4573 com.tvone.untoenynh -
Tries to add a device administrator. 2 TTPs 1 IoCs
-
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes:
com.tvone.untoenynhdescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.tvone.untoenynh
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.tvone.untoenynh/app_fogdqxpss/puqiklllaj.jarFilesize
34KB
MD5b30f63d751e58accea36d408ed680632
SHA13c8afa7e98a674c3be9e0f9ae37c0dd408b09e2c
SHA25675ef5147279ddef2e7a9cb0c264b9055ef638904dfb93c3a5faef977fdd23326
SHA5127fd4e755f5fb3619d301babcc0e7c854c51129bfc1db7319fe899398b4c5c62646b4687fb04bf0a3b0cf08d8bfce39e4ca2cbac3ecdbebfa4908dd3374475d13
-
/data/user/0/com.tvone.untoenynh/app_fogdqxpss/puqiklllaj.jarFilesize
72KB
MD5cfe79f8009a3b37a758d886f089cd9a4
SHA136e2c2f751eace6a3f57fd9e2f3a39052d5ec2b1
SHA25662b6663264b1bf3261faa8e7cd444f100ce73644522533a95135861f325f576f
SHA51201259731514f79e22dc4e314935e5c0e1e8fa9861ff18ff42ad52aa20a64606aa48934310199b9a2e217ecfee2a9ad551f64909a929a4d591e90ea18423c4727