Analysis
- max time kernel
25s - max time network
133s - platform
android_x86 - resource
android-x86-arm-20240603-en - resource tags
androidarch:armarch:x86image:android-x86-arm-20240603-enlocale:en-usos:android-9-x86system - submitted
05/06/2024, 04:57
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
973bc977c70a63e8b7b2071d9773d9f5_JaffaCakes118.apk
Resource
android-x86-arm-20240603-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
dERlZG.apk
Resource
android-x86-arm-20240603-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
dERlZG.apk
Resource
android-x64-20240603-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
dERlZG.apk
Resource
android-x64-arm64-20240603-en
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
dynamiclib.apk
Resource
android-x86-arm-20240603-en
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
dynamiclib.apk
Resource
android-x64-20240603-en
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
dynamiclib.apk
Resource
android-x64-arm64-20240603-en
0 signatures
150 seconds
General
- Target 973bc977c70a63e8b7b2071d9773d9f5_JaffaCakes118.apk
- Size 1.8MB
- Sample240605-flks2sff85
- SHA256 6cfa5d55d6f87b7a4a45c6c429b1d1429674f19f57e82c9a642035850ddeb2fb
- MD5 973bc977c70a63e8b7b2071d9773d9f5
- SHA1 5cc405e03936b3a44a5e8f1338cedf99b86bacb2
- SHA512 9309c19c336e8023d7d3f7bc6b70c1019add6d5e5bccf624cb694179491a4eb4f9ad2db648ec9534b010f1e87abed177d3fb99c1d16beed6b154085d8aaf0d2f
- SSDEEP 49152:EsUt5D3xfs6gmCfLzgcm0Ks0TGyldAGvi+GredpBOqCzr6G:Obe6gpDzL2FvH2zd
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Queries the phone number (MSISDN for GSM devices) 1 TTPs
- Reads the content of SMS inbox messages. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://sms/inbox com.hssd.sbvoa - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.hssd.sbvoa - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.hssd.sbvoa - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.hssd.sbvoa - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.hssd.sbvoa
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.hssd.sbvoa/app_Wyzf_plg/5.0.9.jar
- Size 50KB
- SHA256 611bbbd83419cac7976482fefa632fbb138332fb1cebc494f114787b66ade248
- MD5 420af8883b28b70fa5698fc2c9bc1ae2
- SHA1 80b2d0868f0c2170f93d2f93c61c8b430936d181
- SHA512 f72fd329d7b9ecc7d6c7c7c117ff638456201d3797821fdd9eb8b6d5f862544507fd62985a3ecffdb33349851f6e65920962fa44f24bef20b042bcf0ca9ec645
- SSDEEP 1536:cQCX8PNdBpV91XMH8h7K50LdxIakqKcUG6:D/PDBpL1ceWQJBvUG6
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.hssd.sbvoa/databases/cc/cc.db
- Size 36KB
- SHA256 474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da
- MD5 5d7ea1a23af19b4340cc8d90f28297d5
- SHA1 4cfe95b23a9e98378d69c4290af81b51fbe76aea
- SHA512 33071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b
- SSDEEP 12:TCFP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBEyPb8FOwGQn:Tz7sL7yot3BVrHotGGSgGQQQ
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.hssd.sbvoa/databases/cc/cc.db-journal
- Size 512B
- SHA256 28ee1476f4051f5ef90ae8df1c63415b8381be07b4c93ecb926e54e604b6515e
- MD5 7f156014819e56f0ccfaa3ba1ba9b673
- SHA1 9a638b952b50ab95af6c17b40fa86c7eff22a652
- SHA512 f578889001986c55dd3d10e688b1fd1dfac5f20cf2f2ec83e9188597393a443950ce489a4ef8e66b89497a8685258415da33bc0a9bfe998fbc93479784a636cd
- MD5 SHA1 SHA512
- Path /data/data/com.hssd.sbvoa/databases/cc/cc.db-wal
- Size 48KB
- SHA256 b6e516167c4d2b4405dedc6f4af48548d5d363814a3d93f9a274e27a4f68d904
- MD5 4255b571a1547aab8d748dda735c61b6
- SHA1 e59f912a301f1f9b959b14bf07bb81bb3edcddb8
- SHA512 27aa7c7963b90574b0c81fa07696594a5868da8e7b6313be6fc4579dcb25e0102cfbe1f5ac88008bc8c8217cabea599d54313703877d4100b4c0582a224e15cb
- SSDEEP 48:PJlAzNSP/Se2JyrshBWfSP/SD1XnL6xGav:PDQ0P6e2J9P6pXnL6xfv
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.hssd.sbvoa/databases/flyou
- Size 44KB
- SHA256 d6e4da9d6ef70d6cf7b550a6446a8bce843ef397c1df2f0c6551881853e0403e
- MD5 a072557c13ffe50f617819f08eb8e453
- SHA1 67e36dd1b56ef6a2a6eb4efe039b9de612870697
- SHA512 f176c3cacbf47811c508084ec1df66ddc16ee7abfdabd5a225e2fca8d3b5da9f41a8adb2c7b9ec3f79d972a70f4f65f1bdc07694a85dc35bad94411c3ef68678
- SSDEEP 48:Tt/6nFivnFi8nFiB9aKFaKGIOnJlPILXVS:JMx7aKFaKGIRX8
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.hssd.sbvoa/databases/flyou-journal
- Size 512B
- SHA256 9567a3289bfd3c0d19eec4e3798c6985ab0664e8874c6f105d232c77822feabe
- MD5 a66497850dc6a1eb7ea4361daeae87b0
- SHA1 8be55a9f7edca3a81946fefbb9edfeff3eb74fde
- SHA512 35c6b3e0dc5c9f2176866473fd8f3b733a7ffff51257095aa750aadaf33162891cb8740397d68757bd76de319c462eacad776876ea8585a9160e431bc5b3c77a
- MD5 SHA1 SHA512
- Path /data/data/com.hssd.sbvoa/databases/flyou-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.hssd.sbvoa/databases/flyou-wal
- Size 56KB
- SHA256 6d372518e0a240a9765e3986717124848bb0e2d33349510ffe2534009e216f57
- MD5 f87cdd9154abac86dc2196142ee0fe26
- SHA1 2ea2c17ccccba2d0a6cc9580ca3673b1d1ec8a26
- SHA512 de6490c21283e24e53c61d4766752412cb7dde1c6c6cab01f686da61efa3ec2f5143c1e5908dc40606da233f6c71991de71881851f6137a2dbcb41f4a908baec
- SSDEEP 48:6szNSP/Xyt/6nFivnFi8nFiB9aKFaKGIOnJlPILXVSP/f60MA:6U0P0Mx7aKFaKGIRX8Pq0M
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/com.hssd.sbvoa.start.times/com.hssd.sbvoa
- Size 77B
- SHA256 8d8103c88557bcf6dc06f9e44b45ab3412c333fce6e22380a91de610d3eafd05
- MD5 81501198c971ae16a99f41982142a055
- SHA1 f8487a793c0f13e23510811d3847570a094f9014
- SHA512 9065477b5e426562b422a2698297573e718d37b78c7fb1d4461fb0e30276aa9d5a8308e8c29adfb1a0006456f4573f383cd64b8d7345a9b91a8ac68824246d07
- MD5 SHA1 SHA512