Analysis
-
max time kernel
44s -
max time network
137s -
platform
android_x86 -
resource
android-x86-arm-20240611.1-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system -
submitted
14-06-2024 00:51
Static task
static1
Behavioral task
behavioral1
Sample
a766cb090d581545c0a5be1c6a6b8f8c_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
a766cb090d581545c0a5be1c6a6b8f8c_JaffaCakes118.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral3
Sample
a766cb090d581545c0a5be1c6a6b8f8c_JaffaCakes118.apk
Resource
android-x64-arm64-20240611.1-en
General
-
Target
a766cb090d581545c0a5be1c6a6b8f8c_JaffaCakes118.apk
-
Size
6.9MB
-
MD5
a766cb090d581545c0a5be1c6a6b8f8c
-
SHA1
4032ebd713f2da328b34460ba8ee09161e0cf3cf
-
SHA256
68bce5e895fc5094d71c8b06f21d474276b1827498144eab5686aae1aba53792
-
SHA512
5d6743270d8b4ac2604d3feb70aaa6dffa735bafb71d2741851ddfdf99842c04b8e80e2d4ee44eb7451f3913cc091b897e2c8a04579d1a520d39749688dd3dfa
-
SSDEEP
196608:DLUZOIWY/uQ3YhHzl5Gpwgi413efQaNW9bf:D5Y/uiYTl5ywgi41uZW9j
Malware Config
Signatures
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
com.baby_hair.pelidescription ioc process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.baby_hair.peli -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes:
com.baby_hair.pelidescription ioc process Framework service call android.app.IActivityManager.registerReceiver com.baby_hair.peli -
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.baby_hair.peli/cache/1582435991586.jarFilesize
9KB
MD5e8e0527a01aefdb89afd2c508f131da1
SHA1f1103e6b260c657ceb3d95f1b023af3fda8b133a
SHA256f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce
SHA512fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34