Analysis

  • max time kernel
    7s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20240611.1-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
  • submitted
    13-06-2024 09:41

General

  • Target

    a4e5a86adc222f7b94cd4c651d5e8710_JaffaCakes118.apk

  • Size

    770KB

  • MD5

    a4e5a86adc222f7b94cd4c651d5e8710

  • SHA1

    e1df7aac3816cb42b820fa5b21b497751cde559d

  • SHA256

    e408dcf2ef3f8b9f2c2b4dea7fcf8c59f491011ab4082262cbbd13f62acbceaf

  • SHA512

    7c096e7070c90f27d6532bf1e3f78901e74044b418c7f7244155d7748825a07501ef4fdaaf2532c177781814108e9e2c7b982145b0beb1c84f75d46617247af1

  • SSDEEP

    24576:HJd9cR0ThZkqRs1MGfTwX9ueAqHGwPb38ABPeb:RhZkqR1PBr8umb

Score
6/10

Malware Config

Signatures

  • Queries information about active data network 1 TTPs 1 IoCs
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • org.silentchen.www.agilebuddy
    1⤵
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4265

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /storage/emulated/0/Android/data/code/MID.DAT
    Filesize

    60B

    MD5

    c679783f144b5b77cbcc89952b9590de

    SHA1

    339c29f74856fbb0a27070d1d90c1acde4d49142

    SHA256

    03e9e03b09bb456d2e730f787e5b232d119d59547959fd73617cbf44dcf56de3

    SHA512

    5ac8cdf1e7950029ccd418c6df2991e9763083cc631f549ab2302758b0cd634817c1f712db7310927ba39aa9612e7be746532142434d314fb7231e2f97d4aa2f

  • /storage/emulated/0/Download/9j/1.dat
    Filesize

    15B

    MD5

    927480efb7cbb7e260eb70a77c9dd19c

    SHA1

    a99b69e337352448652f3b47cf4b603806ca97b9

    SHA256

    f6d40c4149c098ca475bd6fb9d5c84460a0899af5c1cac2b93b9ee4c00931dd0

    SHA512

    70edddd7ec081baa286a8713cf5402d7f820eea6650fcaf22ec5f45dc3fd2c73d06001731ee71a0819520f5fbd84d6b3a973fe32e9f79c221cb282dab3903c19