Analysis

  • max time kernel
    114s
  • max time network
    166s
  • platform
    android_x86
  • resource
    android-x86-arm-20240611.1-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
  • submitted
    12/06/2024, 14:27

General

  • Target
    a0fe08922e5c9dc631d43cd126621c65_JaffaCakes118.apk
  • Size 12.6MB
  • Sample240612-rssb9asbjk
  • SHA256 093f59e21155961b3103d1b366b1bbc12727bd124c408dd95787323b3ea0792b
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • de.nr.android.app.locator.premium
    1⤵
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:4273

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        events2

        • Path /data/data/de.nr.android.app.locator.premium/app_fiverocks/events2
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512

        events2-journal

        • Path /data/data/de.nr.android.app.locator.premium/app_fiverocks/events2-journal
        • Size 512B
        • SHA256 d42640c47fa88e32ff9ab862d14a2c8392a6c644301f77bb2b3bddd07669fcdd
        • MD5 SHA1 SHA512

        events2-shm

        • Path /data/data/de.nr.android.app.locator.premium/app_fiverocks/events2-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        events2-wal

        • Path /data/data/de.nr.android.app.locator.premium/app_fiverocks/events2-wal
        • Size 36KB
        • SHA256 bfbd968de6cbc526b5b61079f1403e267d4d2aa581d47f435355a306f9979e82
        • MD5 SHA1 SHA512 SSDEEP

        install

        • Path /data/data/de.nr.android.app.locator.premium/app_fiverocks/install
        • Size 36B
        • SHA256 fad899188fe5711e428dc9ea458c6edb32754027ec8ba80accad69505917fd42
        • MD5 SHA1 SHA512