Overview

overview

8

Static

static

6

aac6e85230...18.apk

android-9-x86

8

aac6e85230...18.apk

android-13-x64

8

Analysis

  • max time kernel
    4s
  • max time network
    170s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240611.1-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240611.1-enlocale:en-usos:android-13-x64system
  • submitted
    14/06/2024, 16:56

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    aac6e8523080d52d3a58226523d718b2_JaffaCakes118.apk
  • Size 2.8MB
  • Sample240614-vfnebasfrm
  • SHA256 2b03d2c23056e633deb5c7d8d0b3bcb0f299c53792e1aa304737305ebf119d28
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
discoveryevasion

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 1 IoCs
    evasion
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
    evasion
  • Checks CPU information 2 TTPs 1 IoCs

Processes

  • com.yxxinglin.xzid29463
    1⤵
    • Checks if the Android device is rooted.
    • Queries information about running processes on the device
    • Queries information about active data network
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Checks CPU information
    PID:4328

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        coraweqtDevice
        • Path /storage/emulated/0/DKtmp/coraweqtDevice
        • Size 16B
        • SHA256 9286b67e4da8157959d71762f71be093319f35af939759cadd8228b1adfdbd3a
        • MD5 SHA1 SHA512
        Submit Download