Analysis
-
max time kernel
17s -
max time network
140s -
platform
android_x86 -
resource
android-x86-arm-20240611.1-en -
resource tags
-
submitted
13-06-2024 09:10
General
-
Target
a4c99efe99a7db4e7659b53300b8cb45_JaffaCakes118.apk
-
Size
26.2MB
-
MD5
a4c99efe99a7db4e7659b53300b8cb45
-
SHA1
96cf421e73a26e35887f7c854495f331de1aff5c
-
SHA256
8b4cc2e507907a5c718dc13bdaafa73ae02979bd50371503d8654a36cb9f9b1f
-
SHA512
a9a37656239d1009d853486a46c67f5dbde51f20abae0f6d0198039ed2ee0cc1154e89a47b39e4ab2b8d12451a3b0ce477d8938955de6d6d8e6472d5525484a3
-
SSDEEP
393216:zB2E7QbdTsYsLCWvsiaapYJtRwRVVzr2GrpV2yt4Av1o5jHYvDxgu0rOI6GbLpeR:zuhfWU+Ko3PVhtP1ol9ag/puYiQA
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Acquires the wake lock 1 IoCs
-
Queries information about active data network 1 TTPs 1 IoCs
-
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Processes
-
com.dws.armyantz.vqs1⤵
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.dws.armyantz.vqs/files/AF_INSTALLATIONFilesize
33B
MD50b594c4a1438bac2cc873b72bb4e9196
SHA1613469c30f2730c970857ac1f63336f2e4ff16ce
SHA2561515401e82cadfc991924303717673e7b12ae2d2cf44a7cfb2457103d0e49af5
SHA51282f50b74a329f4c43eef97d6b03cba3358972771899b9456aee188fb1d91e0f82f1740b4ca90fda49fe08edb8661e07bb771f470dcbf84948c55a3be649751e5