Analysis
- max time kernel
5s - max time network
190s - platform
android_x64 - resource
android-33-x64-arm64-20240603-en - resource tags
androidarch:arm64arch:x64image:android-33-x64-arm64-20240603-enlocale:en-usos:android-13-x64system - submitted
03/06/2024, 23:26
Static task
static1
Behavioral task
behavioral1
Sample
92ec2d92db5c8656e24a086c38f8f946_JaffaCakes118.apk
Resource
android-33-x64-arm64-20240603-en
Behavioral task
behavioral2
Sample
lib360.apk
Resource
android-33-x64-arm64-20240603-en
Behavioral task
behavioral3
Sample
lib361.apk
Resource
android-33-x64-arm64-20240603-en
Behavioral task
behavioral4
Sample
gdtadv2.apk
Resource
android-33-x64-arm64-20240603-en
Behavioral task
behavioral5
Sample
libni_510.apk
Resource
android-33-x64-arm64-20240603-en
Behavioral task
behavioral6
Sample
bigicon.apk
Resource
android-33-x64-arm64-20240603-en
Behavioral task
behavioral7
Sample
libni_511.apk
Resource
android-33-x64-arm64-20240603-en
Behavioral task
behavioral8
Sample
bigicon.apk
Resource
android-33-x64-arm64-20240603-en
General
- Target lib360.apk
- Size 416KB
- Sample240603-3e89dsdg79
- SHA256 3dd3f5fb3f3caf48f3dd99410102f804aedfdf42582f7a9f12c9d26a60649a04
- MD5 2f78d0967ca568ce8ca499048621c4c2
- SHA1 a8c72bad930b1aa6aa4eaa9de2ba5fcdda28f06d
- SHA512 75c45a2781f73932cdbd9e2119cd927e38612d7ca48bf7293ab679ac386e8b75718a929d81b8c5a2e1db6cede036c207b4da13c3403b0ee4bad5858313a50b58
- SSDEEP 12288:Rr/mv1+q62vD3+chmTzd4jRAt5ZITrS3Dy:RqXrL3+3TzyjRM5+j
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.androids.setting/files/tqperf.apk 4198 com.androids.setting /data/user/0/com.androids.setting/files/1717457243761.apk 4198 com.androids.setting - Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.androids.setting - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.androids.setting
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/com.androids.setting/files/1717457243761.apk
- Size 145KB
- SHA256 4ae153b5628f411cb93526ca14153c65fc18577b4d1346fdb167f7d65de9e946
- MD5 d5eadbed0fb12243d0e9699595e79375
- SHA1 2a26c32c127ac8453b16a9f1334a52f417c2286d
- SHA512 8704c8deba4b89a4b19b2c3a480901a7d1f611cc2914db7889a4bea5c453ca1d7a2e8ce3d91524a280e7b2779eb23b8305cc0df81ef5b94842568015cb75cc2c
- SSDEEP 3072:GffebVcHJwAXsF+7s4J1I0osZMjMhqN8rpv3wwI1:UeGpxcYaJIqyrB3wF1
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.androids.setting/files/1717457243761.apk
- Size 337KB
- SHA256 db04598f8e1504a048a8bc932cfa48175c3c69ac0fd563371ded17448b098167
- MD5 fce41716a0de9c16648e13375fdd86f7
- SHA1 eabffef974007d1b0fb40e5958af49a88ec55012
- SHA512 121ce39c15fdfbc66df44270ac17c756010667c94f133eca2a55ff5229304bc4d37b699b36f59fbfb9a228227489a6ba0c7759349074a625ae68ac48665673c4
- SSDEEP 3072:VK69pcx/XPw/sKscekZ6u8kMaPkAygcS9LsZwDv76mINjg+K/KnCVBMbDlNoxL5z:Vl9p9EK/bOAv+GVBGD9HOB
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.androids.setting/files/jhjioj.so
- Size 145KB
- SHA256 7904011a7419cafb8d57780095d937897104dd3fd77e8eacc57972364ab745ef
- MD5 6dbc1b78a8c62bdedbf2d5746258561c
- SHA1 5a4bd3f1ce669f5afb316d74637e53097298704f
- SHA512 4856aef8e11cb28faeff368dbc1a349e610662fff50d6eff7f4ebbd0b58ebff4846950e69ad697a9f2a5892f9553387bf08b734e3f7e9f51f39b098b8a1c721d
- SSDEEP 3072:c/J2OyEtSCRyEMbXv2k+qwne8Hjv3Zj8Bfk2NVD3WU29cc/chmm:c/mEgXv3+qwe8HK62vD3lc/chmm
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.androids.setting/files/tqperf.apk
- Size 19KB
- SHA256 31388e1402fbf69d6fdf40c4182c43cfaf5c9770fa1006b67e5c25dbb39ee47f
- MD5 28a6c7f14f97ba35010bba02405b8dba
- SHA1 0f5b8eb5c3d5f48da6d747300f6fe4bd9144ca76
- SHA512 a075b2e155ab41293b47d76ad11c2d1571426ce8e0f8c407489690995afed3d99e1eb2212946966c54bf891f22c50db4bab81b1cd6d5916f999c3a960251ee50
- SSDEEP 384:PC9NPjg4wtiP7OEkNe1nZDr5nZFwDLKu4e7XzyFvmIAl9AAs:PC9RUl47ge1xrXFWLKxe7X+Fu9y
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.androids.setting/files/tqperf.apk
- Size 13KB
- SHA256 c8307965e4c0d8f0cbfb853e9511ceba326cc0b58a6449cee3e6024122bf1a9a
- MD5 6d15fa35b0f6c73c95cd2fced082b679
- SHA1 7fb166529820a0b553c78bd51d5f4c8c490501aa
- SHA512 f96dc8faf94748e5646a1495edca3bb360af91ed6a741f3bb9cf94e28c6e1d99481b2a13bb4e6aea64e9cb559ef3bb023d4cf14d470783db8a9b7e8fa6510258
- SSDEEP 192:oI2vQgBQ/1CpzBxtEh7PJNPeoTD9ZYy/um9D1iRwyi8ZILyvc24R2/:XKvnfO9R9TZaCum9D1oisuyvc244/
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/PluginLog/CrashLog/CrashLog_20240603232724_4198.log
- Size 3KB
- SHA256 ae72063be02d24e0bdaa2d05e2dc708a733ae2df7e934bfe3220985ca8b3354a
- MD5 de694058482608076b9fdd7687b4616d
- SHA1 c16b8394b17dccd72dcfa8fe1e7b7e9411cc9ccb
- SHA512 d3745dc92842c64b37c37f66862a61d395adde3c0cc76d54c9b9c34acb0078b560258f3b70bf8e790277f2de5db49d5f9606b6703e466b8de3608d831b1ac8a1
- MD5 SHA1 SHA512