Analysis
-
max time kernel
4s -
max time network
183s -
platform
android_x86 -
resource
android-x86-arm-20240611.1-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system -
submitted
12-06-2024 09:22
Static task
static1
Behavioral task
behavioral1
Sample
a02a0521554e6a3e2f600e85cd7240af_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
General
-
Target
a02a0521554e6a3e2f600e85cd7240af_JaffaCakes118.apk
-
Size
5.2MB
-
MD5
a02a0521554e6a3e2f600e85cd7240af
-
SHA1
a3c7566e8d4fa523b134fb0dfe4b511341aa1d7f
-
SHA256
3cab376c6efa6caccae51b5a2c9f9d9d451dc9360b046cce2354b43fb96fd234
-
SHA512
ff683e071700e1b8dde0b0052efe4a473c654d27df3efe662b88831d9bfdcf10ab89ccf4c90117cfc10aee3784b2d6efbe66611569eeca5adbcb7d7bddef9557
-
SSDEEP
98304:oKE8xEiBFyXEiBo0bbEiBhSDmaEiB1cQEiBHqXLerM2kYXIthY+03LDumYOmeJwR:ok6iBQUiBv4iBemDiBKtiBHq7pL0EW7S
Malware Config
Signatures
-
Requests cell location 2 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
Processes:
ky.bai.woxidescription ioc process Framework service call com.android.internal.telephony.ITelephony.getCellLocation ky.bai.woxi -
Queries information about active data network 1 TTPs 1 IoCs
Processes:
ky.bai.woxidescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo ky.bai.woxi -
Reads information about phone network operator. 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes:
ky.bai.woxidescription ioc process Framework service call android.app.IActivityManager.registerReceiver ky.bai.woxi -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes:
ky.bai.woxidescription ioc process Framework API call javax.crypto.Cipher.doFinal ky.bai.woxi
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5dc7c57fc027f3ffba3316ecfdfa5e692
SHA179c23da7f7043cd82979a4f07cd41ed32df4aab2
SHA256338cc22ec0c313177ff111e2cdd468532bb940e1ac4d6bcce0505daa5bc4babe
SHA512548a485248340d65aa5a14f0392da98f5f408d797fff3e08b82a5d8377ffc00c134cceb1f104daaf8cd1d262b4578e0469fbd5d0fd5c0036847e34bb5447a916
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
36KB
MD56c79fc87670c0d8007df638bbeaabbde
SHA1cdbe39650940e11c60f0ebe8a38aa4973910b1bf
SHA2569e4b2157c4ef5f5caf9618c2958a1f1b63318fd45189bc9975a5d94646266f66
SHA512e2396d799259c559aee27a43d1bb610988aab98c7c9aae3b88860a6ebb845a0db626014ff892be5d519641dea03174e4c70c5e45879fb7ef5230a175e1db19f9