Analysis
- max time kernel
179s - max time network
154s - platform
android_x64 - resource
android-x64-20240603-en - resource tags
- submitted
05/06/2024, 06:34
General
- Target 975ec006f485b20e04b22734ba601deb_JaffaCakes118.apk
- Size 449KB
- Sample240605-hby9sshc62
- SHA256 dcf5bb8568c8a027f696e0b7e1b38869081ac763110ac8046219575ef7c858ea
Score
8/10
Malware Config
Signatures
- Removes its main activity from the application launcher 1 TTPs 1 IoCs
- Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
- Requests cell location 2 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
- Queries information about active data network 1 TTPs 1 IoCs
- Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
- Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
- Reads information about phone network operator. 1 TTPs
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes
-
cn.sllb.contacts1⤵
- Removes its main activity from the application launcher
- Loads dropped Dex/Jar
- Requests cell location
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
5000337-1000_point.db
5000337-1000_point.db-journal
5000337-1000_point.db-journal
5000337-1000_point.db-journal
xj_adlog.db-journal
xj_adlog.db-journal
xj_adlog.db-journal
1717569579876.jar
base.so
comsaappopqgjw3jseanmtr.jar
1717569579876.jar
comsaappopqgjw3jseanmtr.jar