Analysis

  • max time kernel
    172s
  • max time network
    152s
  • platform
    android_x86
  • resource
    android-x86-arm-20240603-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240603-enlocale:en-usos:android-9-x86system
  • submitted
    06/06/2024, 00:47

General

  • Target
    99a753bd1f2d5dc1bd6cbe047b25d92d_JaffaCakes118.apk
  • Size 14.7MB
  • Sample240606-a5a53adh93
  • SHA256 ba6ffd7368be839a6888c2074afb8974b7fd429f63cb64f2c0ee1592b27c5fa5
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • com.pentron.adventure.mov
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4235

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        1582435991586.jar

        • Path /data/data/com.pentron.adventure.mov/cache/1582435991586.jar
        • Size 9KB
        • SHA256 f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce
        • MD5 SHA1 SHA512 SSDEEP

        1582435991586.jar.cur.prof

        • Path /data/data/com.pentron.adventure.mov/cache/oat/1582435991586.jar.cur.prof
        • Size 148B
        • SHA256 c5e6754556dbe01b055066f23c28ddaaf5fe67cee4baed00d59dc993335b3d97
        • MD5 SHA1 SHA512

        1582435991586.jar

        • Path /data/user/0/com.pentron.adventure.mov/cache/1582435991586.jar
        • Size 20KB
        • SHA256 2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685
        • MD5 SHA1 SHA512 SSDEEP