Analysis
-
max time kernel
2s -
max time network
159s -
platform
android_x86 -
resource
android-x86-arm-20240611.1-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system -
submitted
13/06/2024, 05:37
Static task
static1
Behavioral task
behavioral1
Sample
a405808597cce54f92197c8e30add21f_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
a405808597cce54f92197c8e30add21f_JaffaCakes118.apk
Resource
android-33-x64-arm64-20240611.1-en
General
-
Target
a405808597cce54f92197c8e30add21f_JaffaCakes118.apk
-
Size
11.0MB
-
MD5
a405808597cce54f92197c8e30add21f
-
SHA1
25443613190458d67f128d95a5f98f04e2f589a4
-
SHA256
a1830f6c75a5806b0559da896e9dd8c3a09d5ae64e3d2d4b4c77315bb3d63783
-
SHA512
e48eb9840e02c7cd70ba9663afe4f85b1b93ded49704842eb35ce32c0af914b7002597f90ca8df3301044e75432031be60f40d114e7bbb186fe72eda8de4892d
-
SSDEEP
196608:ejhL7m9unZqaQ5Kv90wQAzyF5hfGTr8my3LR4AWmLmN4fQMIA+yR1neJL74dWI5p:ejhLgungcv+w1z6xG8d3LRtq+YWR18LU
Malware Config
Signatures
-
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.njjijjjpjjjjjpjnji.aasss -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.njjijjjpjjjjjpjnji.aasss -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.njjijjjpjjjjjpjnji.aasss -
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener com.njjijjjpjjjjjpjnji.aasss -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.njjijjjpjjjjjpjnji.aasss
Processes
-
com.njjijjjpjjjjjpjnji.aasss1⤵
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Listens for changes in the sensor environment (might be used to detect emulation)
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4281