Analysis
-
max time kernel
3s -
max time network
139s -
platform
android_x86 -
resource
android-x86-arm-20240611.1-en -
resource tags
-
submitted
12-06-2024 07:44
General
-
Target
9ff03f062bb0c58fa11380c290183b5d_JaffaCakes118.apk
-
Size
2.6MB
-
MD5
9ff03f062bb0c58fa11380c290183b5d
-
SHA1
d19743f4caaf2ffe6aeb7afac5085cfab8a0693d
-
SHA256
9f2043d5389728cb360c132e260c6fc61da58faa040dfca8f92395d6f4d87d6c
-
SHA512
ba9e9475dbe9dce41a783fe9091edd50e9782fda7ed6af42164540cd727fd32783964ff927b62e78225b0b206f6438810b4c268a10b5ecafde235a2826e95b6a
-
SSDEEP
49152:WHwAyxaFeaCHfn3C9uWv3Pau2fn5kJpvjDbtPBXiKr+pnQw:PA8Vdn3Gv/4nCJpPXo
Score
7/10
Malware Config
Signatures
-
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about active data network 1 TTPs 1 IoCs
-
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
Processes
-
com.yxxinglin.xzid1290391⤵
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Listens for changes in the sensor environment (might be used to detect emulation)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
-
ls /sys/class/thermal2⤵