Analysis
- max time kernel
2s - max time network
190s - platform
android_x64 - resource
android-x64-20240611.1-en - resource tags
androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system - submitted
14/06/2024, 03:33
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a7ddbf21f8265b085fb84ee15b49f520_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
4 signatures
150 seconds
General
- Target a7ddbf21f8265b085fb84ee15b49f520_JaffaCakes118.apk
- Size 20.2MB
- Sample240614-d4b8hstejb
- SHA256 013a3b3f9f5a1bb6642ca69f9fdb9e71c9ccdeb7511bfaf6720585ba70cfa1fd
- MD5 a7ddbf21f8265b085fb84ee15b49f520
- SHA1 2536c250449f97bfe917341520919c531eec3bf4
- SHA512 6704e0d142d79f82b7da7e151b01247a91412304d99252ec04a34995e1eab8ef477915ab1d2ca951992473d7b8ec9ad2b0f7fe66a38d82ca41d5f18c3bde63c1
- SSDEEP 393216:DNq3Ez3nt92yfjaZPxWBHbL+Rfj+KQEgfpI+tfjYDOZgi3pdcOc0K8gmtI:DD3nt9rraZPAHbyRfj8btfo0dc/8DI
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.jielan.ningbowisdom.ui - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.jielan.ningbowisdom.ui - Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.jielan.ningbowisdom.ui - Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
- Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.jielan.ningbowisdom.ui
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.jielan.ningbowisdom.ui/files/libcuid.so
- Size 109B
- SHA256 c0554ef1262abd6323a45146fe12d92e46883ef6dae8c7270030c9a8632e6d0c
- MD5 7a9f183fe68e2c98f3a919dce0f0bcf0
- SHA1 9925e30e5168841f040d227e46f462d298844068
- SHA512 d8126d88c2b3a513ceab80eaff064b958b6a0e0adf262d3cc33f985d6d04bf0d48fa7ddb10d6ddfa9554128c2aed31ade01594e36feaae1833ba144669d14b1d
- MD5 SHA1 SHA512