Overview
overview
8Static
static
69321fa5d72...18.apk
android-9-x86
89321fa5d72...18.apk
android-11-x64
8bdxadsdk.apk
android-9-x86
bdxadsdk.apk
android-10-x64
bdxadsdk.apk
android-11-x64
gdtadv2.apk
android-9-x86
gdtadv2.apk
android-10-x64
gdtadv2.apk
android-11-x64
vivouniona...ed.apk
android-9-x86
7vivounionsdk.apk
android-9-x86
1vivounionsdk.apk
android-10-x64
1vivounionsdk.apk
android-11-x64
1General
- Target 9321fa5d72164691ce5d36f15fd159c1_JaffaCakes118
- Size 30.4MB
- Sample240604-as231sfe63
- SHA256 4f56ff8997dc4d1b89f33be5676cd06ada9590152cba07d6224efb73a98652fc
- MD5 9321fa5d72164691ce5d36f15fd159c1
- SHA1 efd116957ad1822c75c3bbc0af7094e0ef3d3d4f
- SHA512 974762283d6e3b9ab3bc1401b02210f3a5aac57de8d351684cdef3b908fa6d70edb8d1d824bcf99ac21af3b8b072eef2ac53daf9da096b1d5c91f270940ac550
- SSDEEP 786432:wv3+LhsfskiVA4nG6UZVYHIIIhYp7cZa8E5:83+ifskiVA4GpZVYHXrp8re
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
9321fa5d72164691ce5d36f15fd159c1_JaffaCakes118.apk
Resource
android-x86-arm-20240603-en
Behavioral task
behavioral2
Sample
9321fa5d72164691ce5d36f15fd159c1_JaffaCakes118.apk
Resource
android-x64-arm64-20240603-en
Behavioral task
behavioral3
Sample
bdxadsdk.apk
Resource
android-x86-arm-20240603-en
Behavioral task
behavioral4
Sample
bdxadsdk.apk
Resource
android-x64-20240603-en
Behavioral task
behavioral5
Sample
bdxadsdk.apk
Resource
android-x64-arm64-20240603-en
Behavioral task
behavioral6
Sample
gdtadv2.apk
Resource
android-x86-arm-20240603-en
Behavioral task
behavioral7
Sample
gdtadv2.apk
Resource
android-x64-20240603-en
Behavioral task
behavioral8
Sample
gdtadv2.apk
Resource
android-x64-arm64-20240603-en
Behavioral task
behavioral9
Sample
vivounionapk_v4.2.4.0_d74cb3a_201808271150_signed_aligned.apk
Resource
android-x86-arm-20240603-en
Behavioral task
behavioral10
Sample
vivounionsdk.apk
Resource
android-x86-arm-20240603-en
Behavioral task
behavioral11
Sample
vivounionsdk.apk
Resource
android-x64-20240603-en
Behavioral task
behavioral12
Sample
vivounionsdk.apk
Resource
android-x64-arm64-20240603-en
Malware Config
Targets
-
- Target 9321fa5d72164691ce5d36f15fd159c1_JaffaCakes118
- Size 30.4MB
- SHA256 4f56ff8997dc4d1b89f33be5676cd06ada9590152cba07d6224efb73a98652fc
- MD5 9321fa5d72164691ce5d36f15fd159c1
- SHA1 efd116957ad1822c75c3bbc0af7094e0ef3d3d4f
- SHA512 974762283d6e3b9ab3bc1401b02210f3a5aac57de8d351684cdef3b908fa6d70edb8d1d824bcf99ac21af3b8b072eef2ac53daf9da096b1d5c91f270940ac550
- SSDEEP 786432:wv3+LhsfskiVA4nG6UZVYHIIIhYp7cZa8E5:83+ifskiVA4GpZVYHXrp8re
- MD5 SHA1 SHA512 SSDEEP
Score8/10Checks if the Android device is rooted.
Checks known Qemu files.
Checks for known Qemu files that exist on Android virtual device images.
Checks known Qemu pipes.
Checks for known pipes used by the Android emulator to communicate with the host.
Registers a broadcast receiver at runtime (usually for listening for system events)
Checks if the internet connection is available
-
- Target bdxadsdk.jar
- Size 192KB
- SHA256 9e95a294e6e4bde6403e5e86502b844668959222c619ee690baf7eb47e06df10
- MD5 f133300f181ba96519a48b7b782bde53
- SHA1 a5aca3b45716c21677b8f1a004d67050007f1ebe
- SHA512 18bdeb36dd08c0912fc827f60c6e3e7252d6ebfde61f476e593736df5cb744713298f714e595b5482fb02b0b5e04c02a521b9e72c728a7a609fd7cb1f581106c
- SSDEEP 6144:DbkCy3w2eZZKZLRrPWU6lWsx8gmFzetbP+WsXp:EVA2zLRCTAIrL9PRs5
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target gdtadv2.jar
- Size 230KB
- SHA256 c6a8f2838c910a50b56bddad227ebed00b8b32a6869a432c83964b1150ad2c59
- MD5 33aeb27eefc5ae7838f01186e27d8816
- SHA1 2a7ef64266577916f05cc841c9f977ca8a34568f
- SHA512 ebd8ccc5750aa1c2a28e849149d0ef3d1c997479008a803a931ea10c82bd99d90797a99329690cbea6cbc18d45bbe481a5576abfe3ca8afc96dbb3974a0e00c5
- SSDEEP 6144:B8Obhi9RAdTKqZVGee8QXMLzKb/n4BQk+m:BbhiTAEQeVsWrn4BUm
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target vivounionapk_v4.2.4.0_d74cb3a_201808271150_signed_aligned.vua
- Size 4.2MB
- SHA256 333ee74803ab4b114d6217250623869c751a00f4748c826c19ffcd7b29476195
- MD5 3200674229ed57cf762fc3d8c5137b55
- SHA1 0896d5f138545dc9ddbf0003518880d745c8fe0e
- SHA512 31c96314a2b0d80ef3d6c04c0a6894b6a8ebff7e501fd48499ea0e12969ba4ac00cdd844caf839a16cdcffa5b51ee2f33af36a578dfd450c79c7e2bbc0c521ff
- SSDEEP 98304:aQn4W5hESDzkY18DTTcDPPIKGPBhFI+sqFkSOO:aQ4W5hEIkg8DTTcDPPIK+HFknO
- MD5 SHA1 SHA512 SSDEEP
Score7/10Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
Queries the unique device ID (IMEI, MEID, IMSI)
-
- Target vivounionsdk.res
- Size 29KB
- SHA256 cc8416f87003538f2c8ea5280a7eaebfb40597b6ebdcc33c4fa64b0cf08d3b73
- MD5 7a92466708fa1ae45c5585a5b986f5aa
- SHA1 e9e8e0dc60208b7a8b64a65550442a73f1166c30
- SHA512 026dec17ed60d89257c8cb7873a0ccc0de910aad6706f1bbb7936229d7074b9542b7b80a2040f466c64e6cf8896e8531ee01ed7acbfa6a7ed90637a5fe2d477d
- SSDEEP 384:RAhiLwh2JKStCYi7PSSDq41bVjDIcRy3ftLYHiLaBsKFj+C:RAV2wYnSDqojDIcsfiHiG3l
- MD5 SHA1 SHA512 SSDEEP
Score1/10