Analysis
-
max time kernel
76s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20240611.1-en -
resource tags
-
submitted
12-06-2024 07:37
General
-
Target
9feb2c1ef3bbd3146e1953e2f1ca22a3_JaffaCakes118.apk
-
Size
791KB
-
MD5
9feb2c1ef3bbd3146e1953e2f1ca22a3
-
SHA1
519b62943ce2bb41c6c417731db0ab2d53699c00
-
SHA256
1302973d5142b89e212e177aeec161e384aa3262a2c2d7c2af8c9274f92e9bde
-
SHA512
5dedf6332269db31719695364cbe4dfa21d4201a9eb6f6af9b0a8a4b28ba87cac5e82c51f939034dd1f0230de5c94f3f4481d867cccc69af1b4c5911c1e2a3d8
-
SSDEEP
12288:b1/GTSV6NGB5MND8JU3S96LRgh/jvtootsA5tpL767u5uat68vAK3twIxhOoHVEk:15sGBGuyi9jrV9sSt176yHo8htQ+5
Score
7/10
Malware Config
Signatures
-
Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
-
Queries the phone number (MSISDN for GSM devices) 1 TTPs
-
Requests cell location 2 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
-
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Reads information about phone network operator. 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
com.ishow.dwjtd511⤵
- Checks Android system properties for emulator presence.
- Requests cell location
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information