Analysis

  • max time kernel
    171s
  • max time network
    148s
  • platform
    android_x64
  • resource
    android-x64-20240603-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240603-enlocale:en-usos:android-10-x64system
  • submitted
    06/06/2024, 00:47

General

  • Target
    99a753bd1f2d5dc1bd6cbe047b25d92d_JaffaCakes118.apk
  • Size 14.7MB
  • Sample240606-a5a53adh93
  • SHA256 ba6ffd7368be839a6888c2074afb8974b7fd429f63cb64f2c0ee1592b27c5fa5
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • com.pentron.adventure.mov
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:5038

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        1582435991586.jar

        • Path /data/data/com.pentron.adventure.mov/cache/1582435991586.jar
        • Size 9KB
        • SHA256 f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce
        • MD5 SHA1 SHA512 SSDEEP

        1582435991586.jar

        • Path /data/user/0/com.pentron.adventure.mov/cache/1582435991586.jar
        • Size 20KB
        • SHA256 2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685
        • MD5 SHA1 SHA512 SSDEEP