Analysis
-
max time kernel
3s -
max time network
141s -
platform
android_x86 -
resource
android-x86-arm-20240611.1-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system -
submitted
13-06-2024 04:03
Static task
static1
Behavioral task
behavioral1
Sample
a3c4d4ed46593faeb0293f493d42960c_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
a3c4d4ed46593faeb0293f493d42960c_JaffaCakes118.apk
Resource
android-x64-arm64-20240611.1-en
Behavioral task
behavioral3
Sample
alipay_plugin.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral4
Sample
res.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral5
Sample
res.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral6
Sample
res.apk
Resource
android-x64-arm64-20240611.1-en
General
-
Target
alipay_plugin.apk
-
Size
354KB
-
MD5
370e3ce20f4f363c993599c8702f21b7
-
SHA1
5cc5e92fa2347aab04c145954cec76b1cfd15c37
-
SHA256
1b6b376b638eb17b718f45b92005f20e78d27687b831b13b1aaad1bdb05daf1e
-
SHA512
50c5702f2a4398aae9ab5b376d5f420cebb20c07030a4efc70b8e45934d7a93803b74f41c1c0bf48e9c08c1c43b9ec247c60190b55db52afc095d4703fac5912
-
SSDEEP
6144:l26IZ1oqBjGVN8TdW4zxgnm1Us3JuOK2Ef5C8EcPK+WvyQcQ2fnFByVW:l2vpBiVN8pWggmlYL5CLE8RcQ2fnGo
Malware Config
Signatures
-
Requests cell location 2 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
-
Queries information about active data network 1 TTPs 1 IoCs
Processes:
com.alipay.android.appdescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.alipay.android.app -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Processes:
com.alipay.android.appdescription ioc process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.alipay.android.app