Analysis
-
max time kernel
47s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20240611.1-en -
resource tags
-
submitted
12-06-2024 12:06
General
-
Target
a09c25242f6efce65afc9fa0b8cd5c4f_JaffaCakes118.apk
-
Size
1.3MB
-
MD5
a09c25242f6efce65afc9fa0b8cd5c4f
-
SHA1
bd317b700d182b8c1e554986377709bc7fab7147
-
SHA256
04a9307d2def3f1d1af1927b884d5bf274dd63ce22feb95f53d74f4cfba4182f
-
SHA512
a4930ac0c433313460d87b7c55beaa71ba57935140cf2d61b6490b0932033b4be2bea8680012d0bc947d64a0464c2ff729f9ef78932691dcb62f5d765badadc1
-
SSDEEP
24576:pzk1nNckyQgFuOOP8xDMpIDyorgF4MjVOXyhhWVNTO9t:V3ruOPD1yorgF4fyhhKNm
Score
7/10
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Queries account information for other applications stored on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect account information stored on the device.
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Checks the presence of a debugger
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes
-
nl.fameit.rotate1⤵
- Makes use of the framework's Accessibility service
- Queries account information for other applications stored on the device
- Makes use of the framework's foreground persistence service
- Registers a broadcast receiver at runtime (usually for listening for system events)