Analysis

  • max time kernel
    2s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20240603-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240603-enlocale:en-usos:android-9-x86system
  • submitted
    04/06/2024, 00:51

General

  • Target
    9330d36769fac8abc6a147d8e350acde_JaffaCakes118.apk
  • Size 21.7MB
  • Sample240604-a7ksaafd2x
  • SHA256 912e6177b9f8cc1b889867660c64b3d0bc807f762aff278081130a741866cd9a
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Requests cell location 2 TTPs 1 IoCs

    Uses Android APIs to to get current cell location.

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks if the internet connection is available 1 TTPs 1 IoCs
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs

Processes

  • zmob.com.magnetman
    1⤵
    • Requests cell location
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Listens for changes in the sensor environment (might be used to detect emulation)
    PID:4274

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        tbslog.txt

        • Path /storage/emulated/0/Android/data/zmob.com.magnetman/files/tbslog/tbslog.txt
        • Size 1KB
        • SHA256 210c650a8e827ac32a4e264768ae52bde7ecc5dcc5ce98b99e3e36e9bc18ea16
        • MD5 SHA1 SHA512