Analysis
-
max time kernel
26s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20240611-en -
resource tags
-
submitted
11-06-2024 18:10
General
-
Target
9f1815615536aa19180ad550b677342d_JaffaCakes118.apk
-
Size
24.5MB
-
MD5
9f1815615536aa19180ad550b677342d
-
SHA1
565309a2589dba647c144db8af4889de8b12b85f
-
SHA256
c79ead4a50f27223b0c9c2a9572441b47ad60ba8ecbe274c0c81f66016286abb
-
SHA512
fdea474b077aeef493648502a7ea06e4b16d94429061a800b635bc0526d6f796d2a7bea53f8f544bb7982094563524e3ddb9e7ddacd96c72a372b54cc6c8cdfd
-
SSDEEP
393216:JuxkFZzcWeCqCeRhy+0oSqo56muY9uAx8gNT5t0eyyFqJTe7gRBfKH7gIB1k4:A0zPeCq9y+0f9uY98gjt77d7StCxz
Score
7/10
Malware Config
Signatures
-
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about active data network 1 TTPs 1 IoCs
-
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
com.zhsz.zhsq1⤵
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information