Analysis

  • max time kernel
    138s
  • max time network
    129s
  • platform
    android_x86
  • resource
    android-x86-arm-20240603-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240603-enlocale:en-usos:android-9-x86system
  • submitted
    04/06/2024, 11:14

General

  • Target
    94a079810e2d8bc5bce1f51689b74481_JaffaCakes118.apk
  • Size 4.8MB
  • Sample240604-nb6xjaec5x
  • SHA256 6ddb3538d42dc88e76eea1a4824ec975a9d753ab4d0ab5a2973049526c3256ef
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • com.nhcq
    1⤵
    • Checks CPU information
    • Checks memory information
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4291
    • getprop ro.product.cpu.abi
      2⤵
        PID:4326

    Network

          MITRE ATT&CK Mobile v15

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          debug.conf

          • Path /data/data/com.nhcq/app_tbs/core_private/debug.conf
          • Size 101B
          • SHA256 9d1be1807105314e9d67f64a02eefd008d5e5bef094f35b86a1c48d373e988ce
          • MD5 SHA1 SHA512

          tbslog.txt

          • Path /storage/emulated/0/Android/data/com.nhcq/files/tbslog/tbslog.txt
          • Size 8KB
          • SHA256 d4e71aadc751fd73ea62df948963be0c6ec76b5c0af49b7135316883a2dbd2e9
          • MD5 SHA1 SHA512 SSDEEP