999684a667e708c1e0bae8082283d0b776069696227ec0def60a10df022ddeab

Analysis

max time kernel
7s
max time network
130s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
31/05/2024, 03:56

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

85e96b912e5fb0087b7c1ede1b739327_JaffaCakes118.apk
Size

14.9MB
MD5

85e96b912e5fb0087b7c1ede1b739327
SHA1

6f056d0a7314116a58d026ee2530ae527eea9fc3
SHA256

999684a667e708c1e0bae8082283d0b776069696227ec0def60a10df022ddeab
SHA512

4d115ca5dc1b3e08a6d8652e54d4eaa69d7fa187a2469aa61a6c1e05ccbb1fa955b84c7e3e5e4140ef4be5327fc43909978f72a27766b1e2d3e156eb96ca22e5
SSDEEP

393216:kcw0LoiFT2cmhMlljGXuOyzUm5AeLZKCoOsrjFYIBZeA8hVN4+oO5:kcDoiIcCxAUyLZFBsrjxnB8NJoI

Score

7^/10

discovery evasion

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.skyjetinter.chaoslite

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.skyjetinter.chaoslite

com.skyjetinter.chaoslite
1⤵
- Checks CPU information
- Acquires the wake lock
PID:4328

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...