Analysis
-
max time kernel
179s -
max time network
185s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
-
submitted
30-05-2024 03:56
General
-
Target
82f6e45a4193ea93c8c7d0fbe82d57bd_JaffaCakes118.apk
-
Size
30.8MB
-
MD5
82f6e45a4193ea93c8c7d0fbe82d57bd
-
SHA1
c1b51c7498ce74944f619357f216c7bdabe69cb0
-
SHA256
e580ca75cff186b37402383f0d46e2c5123672bdbae08cd422d98289de3377ed
-
SHA512
bee80c7c0c5aa9e693158350370fab71d9692aedd05977a17d51eb4b1f2722c45142f0dd4b638fc6020160663785644f5527361f7726146751cdc8b3fff8994f
-
SSDEEP
393216:F67NDGrXPikc2b7DzUMpsjZjF457aLlFTUblaF/tVaQgaDOJ2pfMK6PE/slfEGIV:Fg8/6A7GlFTUb4QU8Tw/sat1+T9+2ho
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 3 IoCs
-
Requests cell location 2 TTPs 4 IoCs
Uses Android APIs to to get current cell location.
-
Checks memory information 2 TTPs 2 IoCs
Checks memory information which indicate if the system is an emulator.
-
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about the current Wi-Fi connection 1 TTPs 3 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries information about the current nearby Wi-Fi networks 1 TTPs 3 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 3 IoCs
-
Checks if the internet connection is available 1 TTPs 3 IoCs
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 3 IoCs
Processes
-
com.ynxhs.dznews1⤵
- Checks if the Android device is rooted.
- Requests cell location
- Checks memory information
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
-
com.ynxhs.dznews:pushservice1⤵
- Requests cell location
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
-
com.ynxhs.dznews:remote1⤵
- Checks if the Android device is rooted.
- Requests cell location
- Checks memory information
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
-
/system/bin/sh -c getprop2⤵
-
-
getprop2⤵
-
-
/system/bin/sh -c type su2⤵
- Checks if the Android device is rooted.
-
Network
MITRE ATT&CK Mobile v15
Defense Evasion
Execution Guardrails
1Geofencing
1Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
1System Checks
1Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
225B
MD5f8eb9a704afe083756c8aae053767053
SHA16d08e20a62f5018bb4760743bc7f9096ca27c60d
SHA256dddf61a9d1e216a9dae71e8108555d8e915040e5c3ccd7c4a99b0c6569e18a0b
SHA51221743a9c7c9d14e1e994773607f23704b76d527970819435aeba4eca8e00d9b272db477f7ea733a7a48b8e222eff83c5dc272cfebcb9c9df6c2d1005fa085e28
-
Filesize
92KB
MD54ba953f277efe94aa1bca5ca8730e452
SHA1eab3e0f2cea8de4c93fe971a4c4f95e2ea5bdb93
SHA256748b06b5ca4f2d793bd627c5606bf93d05fbcab7d67abb053e50499f8f0726f4
SHA512d4d2371b61e63c8464593102f1d223c3e70131b1f60fdc736851899cb161d6501b897749e41ccfc285c52527b89069bb646ca7d52b8c0792770aa3c344c082c1
-
Filesize
72KB
MD59ca15592e52127f3022e6c145b12bd1a
SHA1f85f1da407b64c32e3567d864d60528c0eaf7e95
SHA256b8d83edab6c573a5d2d05733f6b8d1532dcc803a059d80f7eaeca2e32bec047c
SHA512216695ac72147817b8c47da19aa7e01ee380700b56a31fe17f8bc78f4d24c60f0cb090d63d19b3e9d9f3205725198fc311f72a01c934e109675b8d330a08296f
-
Filesize
512B
MD54ff9feea07afa1dc503b081c2412bc67
SHA1545d7b874500416cc7e7e705bbdb0881efc4780d
SHA25662dff12a5d06ae611e66a6c54c046f754916d49a5fbcf8245592486e420a895c
SHA512ac38fb0fef05f687c0d060de718034c9566cba35b130d62fa910d518f9eff9fc4060b10a93e0719b6ad2e2f0c9c58a5a5a2f4460b4c6db8f5c1e50861fcb32ce
-
Filesize
32KB
MD54e8994d4beda752e9d28c1d44f678185
SHA1c358a00bc95882ef1d86ae8eceb90cc81a69ebae
SHA256b8930c6adcfbcb867f6b5217c15eaa296c8f685e4273919b87994cc42a016611
SHA512e19af09d8031e1a224e6da57bac1105a3987c59e06d9c81f8d6a1a18311b083fe525426cb96dc2f87632c8cbe3d18cd46e239bc7d548ada5126aeb0008ea0263
-
Filesize
84KB
MD5de37da43b457be621af848413e26ec8d
SHA1c147981759ab8c63b6e9553cb66eec7e2d5ccbc4
SHA256915d398a9c677a55e93a2f85ba645eff96f512b23380e3c81e68921bd95c53f1
SHA5123996dfed98864dd9d74525d97532b930ff04f82fe029c6337a9e229d5b8a635659ce6dd0caa194ee527b85f63690ddd1ff5011ec48f121491455060031ccb287
-
Filesize
20KB
MD5286584d93da9b53e35509dd8e5f60024
SHA1c6ea44049842a8f7e39986d4bd0d44d6eb7c9ca8
SHA2561c840eebab1069590940afaa979576116e61fe89630d0445a62b65e621fd3107
SHA512c4f087ee129d84673f422e75603bfd865e0feb6e52437901e4cb4cc436561d2ca12ee2166a1862704640c97d1bb2622b0aca574a7e4d4c7c93a3ab2162e94c50
-
Filesize
24KB
MD5b876092ff49038dfd83e6d77f9d322cd
SHA113e920aa7b019a46c0378211770b46c96d008109
SHA25633b1de0981153cffed59ce474a8a16d51decff027e7ad851f737dbcfe2dc0f52
SHA512dc431b0d7c8d5f786b632cd305b70f9e8575f22e224ca927385bd2451cf319ac2567add1fee6bf8707259a1ba96b24b5a0c1933e18d2f9dbbb04c90ac61da937
-
Filesize
36KB
MD582aba2d427f63af05eb3c3c0682a7f8b
SHA1a9307781219f84687bc4578037ad3b11f12f3132
SHA256e15dda3058f439a41bbe7ac89b8018d3b40933fa760bc3e6c20ea2294bf4ccba
SHA512f2f0de4df31446b0a656967c5bda350772532ac4dc318be9b384258763e467798207949a4d8db16d47a0c2297c9a2f650c413dc73fd1aee05e3cda7165a4f850
-
Filesize
40KB
MD59092f116349504a93bf24ad216956a8c
SHA19b8d0b8356d72425ce55eb430bdc9c9d97f67824
SHA256bb717dd6ae8bc2e722b06efd9a72fcb4c202fc9291febd20fe65558120058487
SHA5120737e5b359d5181fa666dec030bca71c087f602232be79126d9d405957d43bc40c35ab34882164fea924a9d07909ef226a79b399e155ad06c00cb646220ef351
-
Filesize
48KB
MD5ea04d3f4c66f4f554cb961591826518a
SHA15b7ace9ebb17d1f0044e19b1d6d25377c08cbb84
SHA256b2eddf9d02c61bf9fb4a4741b462f1ba3332c84f16c7e2d10fbb440135fa79a7
SHA5124e51a02cd46090894ddfbd6efa526c65a0059e752f1a1c5b536ee1eed91d73ee9fc672b1077648cdc96a3bcfc0daacbbb71ab72be341170bcd77bde42c27833f
-
Filesize
16KB
MD5cc8e8492f11f0a819d10c8b6cdde61cb
SHA133b1d9e74ceaaf1c2f5a8688a9597b6025685b3e
SHA256dda1e726758fff0e1bea01edac76c7dd1653e2bf39ff927c3c367a0745bf39d8
SHA51278de491640970efe9abee0eb707b0155cee125841f1e93c0d79cbac5c1f65ce7f7222b591d60466bc1289d76a83e88e4d258d64bdee0530cae9e1ccee22b0628
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
185KB
MD57ed49608315224ee5d5bba6612cb906d
SHA1361f6d7d6099149b24ea8e1ac84b0e2c9898360e
SHA256a0df642b4d0913f35eea712858d1a04a05bc6c9807782e75a655a8a438cbde62
SHA512f9d05703bae1dc400fb69738dc03ee75aee8161097b99838cc00c1fbe1caa8bc71edbd03495c81539fc4f545e98f5d7f8010a1c6e61a4acbd82367eb11571878
-
Filesize
32KB
MD57a4f1c01fa32348272ba1dcd7cf60ec2
SHA1b8233088f6021608cd7d2277b86cef7a7a868e21
SHA256373eb841a0f2559aedb1f312e0113fa3b1c9c09b17157bb567123b2be2ae72bd
SHA512273473627f638768e64420b98f4758932dc87543b4afa5625f7a5de41b6f6de421df9ef4abf9799844831ab66ba8e2bbc1430e8f08c27d6bacaab50e5ca01ad9
-
Filesize
12KB
MD5f1e6a8b3001a62ee87dee25d4a63c244
SHA1b8b55168b96c652f18caca656ca09740ed40d7fd
SHA25625b30476713d756cbb3e2fac2e141260fb6ceffd8a3d9cdcf67f5d393051a16c
SHA5120926f40e508d6bb5505b1f4e2c982c4e307f22c21a53bf68663d6c376778bd2e11d3ee96d8d01094f690ee52c15d73a1357bf1a2ee26ff059ebb75dab83e4a02
-
Filesize
20KB
MD53877b46d0b7418968f947b62df76193a
SHA1641795c6d9ccb9f8a0fb49a617aee991131af1a4
SHA25683e4953ec3c03230af6e9659755210fd1ea67135b756971cb598880e51c0f10b
SHA512a24697699de81f4576e041b4ff5ea9fdb22514cb04005b622d3130d7dde2826ad97504024c8e31a46985a9a139c043a9f767fa471543fa3308e1352d0ccc8687
-
Filesize
20KB
MD50e54d9eaf2b486c65e8fa308183663b9
SHA14dfadce4f8341179d37a589db5bf70ac81fa55df
SHA2562f9e689bdecdce0cbfce56492c7320cadd5108aa8ea1a0ae1ffd78fd498ffc8d
SHA5124d1d40db9ef79b981f26566a6b59e0d025c08140c30b6bd0016c5ecf3ca66c71d36e812b837fec875e8736feb3366ea07791d0ae7198b6e2c0bb38114f2e45ae
-
Filesize
20KB
MD5c208fc5e7b249345693ca06e60a89df2
SHA16116387ded7fbbb4b6fae06609ff4547887b9f79
SHA2568ec07b6bbf921ae099692bfb57ce67bab81d30cdf2e6961e88d5b53432f82a6b
SHA5129533746af6c6fcfa7db399d2af81c5bad98085b289f17d433f6f61895e621988d08f68971e891573fbf2b7126d2c494dda300e04606ecb4856778fb0e813fcff
-
Filesize
32KB
MD599eb15291f857749ad3f070377e75f60
SHA1f3b21598cff559fe37bc63c2a3437a3cf2e1e394
SHA256f6851116f9106ebd31640666c809c0c6552a8a560469487ebc999a703f7ce9d1
SHA51276c39653cc7157a4eefa01b1c85316ef88605de1390ddf8c7b45066d1b7e36d2f3530b6448e6bf2d47c8f56681607a90cfdf91f2dad117bdc7863cf1ed4ac435
-
Filesize
16B
MD53a52430c1055a9a40047df7745fa9848
SHA1ac34a834a87a4ec220a3d554f6ca15e8889a1b21
SHA256d2789abd2d0acafca5666b3d1b7edd37d5ab25fe9f06fd6bb60c9541907089f3
SHA512235cf41552b1e88f872e39e00b8a8b9391a15c0d37e1902b3fc01f6998de95c8bd70256a296ed746fa9e055e185471d6f260e57f279e3b98dae6f18065fb62db