Analysis
- max time kernel
129s - max time network
170s - platform
android_x64 - resource
android-x64-20240611.1-en - resource tags
androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system - submitted
13/06/2024, 06:01
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a41a195ea82569141965a5dfc6869ac3_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
a41a195ea82569141965a5dfc6869ac3_JaffaCakes118.apk
Resource
android-x64-20240611.1-en
4 signatures
150 seconds
General
- Target a41a195ea82569141965a5dfc6869ac3_JaffaCakes118.apk
- Size 30.8MB
- Sample240613-gqvpgswgrf
- SHA256 8035d6159e38093b3fd7b3c4761af532f1b5d88ddf7180a35f2724403cc24dd9
- MD5 a41a195ea82569141965a5dfc6869ac3
- SHA1 01e65b76e5b9bd131e0b927a016aa0a446e823aa
- SHA512 32a7b9f5982f5ce24b4c9bda10127c4eedf3ba8203d3f76d4cfda231ab157e694124e2177958e78544d987557dc3b15077c2ae6162251b00674d3a918e67b5f8
- SSDEEP 786432:C236JbPt0pP/Voq8kUxqnwAN8kQKqsUf3xNDLn9I8tK2:CzCpdoqlUM3NtQL/BNnrtK2
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Malware Config
Signatures
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.StormhattStudios.Barmark:ngds - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.StormhattStudios.Barmark:ngds - Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.StormhattStudios.Barmark:ngds - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.StormhattStudios.Barmark
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /storage/emulated/0/.ngdslog/com.StormhattStudios.Barmark/pushv2_part_one.log
- Size 1KB
- SHA256 f6b445e0671170d819bc7b623a39ac8e6754001df2ec00347387769f7cb63587
- MD5 528a04327e7677432728b78db9265b2f
- SHA1 1cc2b1d322a303b3ca19c909f9682ba4d81f155e
- SHA512 760859690e1c1ee95df8b4a4edfba399f340724a24dd7804cf1eec4d56f1723f77f6a865fde14ff816238a8be89ef9a9db40d8366eadeb6045f45b49e5b6d615
- MD5 SHA1 SHA512