Analysis

  • max time kernel
    129s
  • max time network
    170s
  • platform
    android_x64
  • resource
    android-x64-20240611.1-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
  • submitted
    13/06/2024, 06:01

General

  • Target
    a41a195ea82569141965a5dfc6869ac3_JaffaCakes118.apk
  • Size 30.8MB
  • Sample240613-gqvpgswgrf
  • SHA256 8035d6159e38093b3fd7b3c4761af532f1b5d88ddf7180a35f2724403cc24dd9
  • MD5 SHA1 SHA512 SSDEEP
Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Checks CPU information 2 TTPs 1 IoCs

Processes

  • com.StormhattStudios.Barmark
    1⤵
    • Checks CPU information
    PID:5135
  • com.StormhattStudios.Barmark:ngds
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    PID:5222

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        pushv2_part_one.log

        • Path /storage/emulated/0/.ngdslog/com.StormhattStudios.Barmark/pushv2_part_one.log
        • Size 1KB
        • SHA256 f6b445e0671170d819bc7b623a39ac8e6754001df2ec00347387769f7cb63587
        • MD5 SHA1 SHA512