Analysis

  • max time kernel
    88s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    02-06-2024 18:16

General

  • Target

    8ef942ffb07581e1e3bc4155baad4172_JaffaCakes118.apk

  • Size

    11.4MB

  • MD5

    8ef942ffb07581e1e3bc4155baad4172

  • SHA1

    85ebee65c75933d065e582807ebe8aeaebe9c15a

  • SHA256

    ba2bad8110452b16b68580fc3c727e2521473fadf42cf53e0609101c27a0284b

  • SHA512

    b6b2a37420d91cc5836d05227d1e9be672e1c482e0f5455d68286dddc81e7bb9cb3ad6d23b08b191ebd940c47d747f27843d0196c14f4de6a549984b9d6f493d

  • SSDEEP

    196608:g1SEgAXaeCNxV0WccD+kDp524e289TIly3w3jOMjgyyXS9t85UycLg:gSEgAgJD+So4e289ARjmXFpcLg

Malware Config

Signatures

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Acquires the wake lock 1 IoCs
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs

Processes

  • ypy.hcr.com
    1⤵
    • Checks memory information
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Acquires the wake lock
    • Listens for changes in the sensor environment (might be used to detect emulation)
    PID:4282

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads