Analysis
-
max time kernel
133s -
max time network
188s -
platform
android_x86 -
resource
android-x86-arm-20240611-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240611-enlocale:en-usos:android-9-x86system -
submitted
11-06-2024 16:16
Static task
static1
Behavioral task
behavioral1
Sample
9ec61292fd3e43ce3a4c025166a50f9e_JaffaCakes118.apk
Resource
android-x86-arm-20240611-en
Behavioral task
behavioral2
Sample
9ec61292fd3e43ce3a4c025166a50f9e_JaffaCakes118.apk
Resource
android-x64-arm64-20240611-en
General
-
Target
9ec61292fd3e43ce3a4c025166a50f9e_JaffaCakes118.apk
-
Size
27.9MB
-
MD5
9ec61292fd3e43ce3a4c025166a50f9e
-
SHA1
e4031aca8c1a9aff592afa525c20d4a84ab888b0
-
SHA256
4490f03ec73651abc32f6a8f3429838eae6ac6a45c7f5225aced936f3035939f
-
SHA512
ee354ca8c0156c6e0987cc469496691fc63e43d5d68da440aabf594a70893bf24a123ff715b757572ff42b164d49e5af29f36ebc8bd81452c963657c015c7c3e
-
SSDEEP
786432:Onyv7juR7aU57dSEPUQjbEaO3EvcM+UObPdF:HxU7SEPUcYaO0vcM+nDb
Malware Config
Signatures
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
com.AliveGameStudio.ChaseTargetdescription ioc process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.AliveGameStudio.ChaseTarget -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes:
com.AliveGameStudio.ChaseTargetdescription ioc process Framework service call android.app.IActivityManager.registerReceiver com.AliveGameStudio.ChaseTarget -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes:
com.AliveGameStudio.ChaseTargetdescription ioc process Framework API call javax.crypto.Cipher.doFinal com.AliveGameStudio.ChaseTarget -
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.AliveGameStudio.ChaseTarget/cache/1582435991586.jarFilesize
9KB
MD5e8e0527a01aefdb89afd2c508f131da1
SHA1f1103e6b260c657ceb3d95f1b023af3fda8b133a
SHA256f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce
SHA512fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34