Analysis
-
max time kernel
179s -
max time network
152s -
platform
android_x64 -
resource
android-x64-20240611.1-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system -
submitted
15-06-2024 02:50
Static task
static1
Behavioral task
behavioral1
Sample
aca48d63a70d9665f5bf87a2eeae9a40_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
aca48d63a70d9665f5bf87a2eeae9a40_JaffaCakes118.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral3
Sample
aca48d63a70d9665f5bf87a2eeae9a40_JaffaCakes118.apk
Resource
android-x64-arm64-20240611.1-en
General
-
Target
aca48d63a70d9665f5bf87a2eeae9a40_JaffaCakes118.apk
-
Size
821KB
-
MD5
aca48d63a70d9665f5bf87a2eeae9a40
-
SHA1
e429099d9aadb96f3743d0a8e0f49485945709ec
-
SHA256
786b31df3335677fc5eee17e8c9c661ddb4555dc1f8da2e902daed6a60d98541
-
SHA512
c10246e32f56f6d6a0fa56d35f3eba4bc1ff36fc431c6d43bfa3dc1fb1a498fa374888b8653fb069c0e066bbc3fbef36e3683da6a3619e00afc1dd7ac8bbefbd
-
SSDEEP
24576:13QgMzZjmUhp1LEVURUDTO+RYRwihakEnjIR+sf:CgMFCUKTGzhakEnkRJf
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Reads the content of the browser bookmarks. 1 TTPs 2 IoCs
Processes:
com.terrynow.easyfontsdescription ioc process URI accessed for write content://browser/bookmarks com.terrynow.easyfonts URI accessed for read content://browser/bookmarks com.terrynow.easyfonts -
Queries information about active data network 1 TTPs 1 IoCs
Processes:
com.terrynow.easyfontsdescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.terrynow.easyfonts -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Processes:
com.terrynow.easyfontsdescription ioc process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.terrynow.easyfonts -
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes:
com.terrynow.easyfontsdescription ioc process Framework service call android.app.IActivityManager.registerReceiver com.terrynow.easyfonts -
Checks CPU information 2 TTPs 1 IoCs
Processes:
com.terrynow.easyfontsdescription ioc process File opened for read /proc/cpuinfo com.terrynow.easyfonts
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
28KB
MD57679783300d300726976a2ebc69b6ced
SHA101323cd82fac2a024d6f18ff1180e5caea61ac2e
SHA256723512c3f192b5816043624da165083b1dcea54e95c6a6736cfca9002e78794e
SHA512ac78fca4e632382d4d82b9682eec674f7e9e166976b93929a11113530553399d1e0a0fefb0cd809264c2715f3a0b95a00dd23ab1a161589baa108a56dc74d40c
-
Filesize
512B
MD5051b92242a4c2f4abd412f088c47298f
SHA18e3766735b34228c2a95c96f13cf78dd8b14fcf4
SHA2566e4b963f2d4b081396058a2c316a6ccb8dc3587c3da3e3e255d858938047656b
SHA512aa822251a571197517a5fabc134a7567c7a568f0b2297d41505633ba4e6d5503321a3357374b5a3dbcd59e6988b02066a549a4c70819a8490280d87df0ba4e58
-
Filesize
8KB
MD51ec75f9d9ca3d0d66c41207c9b6b4e6b
SHA16588228dcc39ba68c50424f5fe755ef9798856ef
SHA25656bb18895df6546790cf78d9986011ea88835269d913d5a668b925231de001c3
SHA5127738e29ac667b555645fe8560735e3134f869cc91ad32b298fb224e0d6ec0e6628c97e06d37dd7f952c4216d363d37e773f14076be4f72be87903611d317f9d1
-
Filesize
8KB
MD5cdcaeba435b2e34578ea90827ae5b542
SHA1bc6f9c6edf5cb5de4685673614081094e5d0dac1
SHA256e6046beff2e9efd4db7d14780ad95f0908a7bd3310a94b3dc21cae5b9d7acbae
SHA51267c343cd1b88b74166b0cf4661d8c367f2b58c9565142bc5b9fa695abb5d5bb9da84d3449ebc438b4eb91a573c51d39df49b032ee895e96e089f4babf591fa19
-
Filesize
100B
MD5dc1ef822ee4f4070c9647ce1d9b14928
SHA14bef799af1b26b58d1482eced277356f40d2528b
SHA25641e505bfa78627b72764e2f899524a74530d6842d9ed2c20a4986be91f7e283c
SHA51206ffdd6b09a0719d01d87815a687363210a995c43a4168a363a135d5c35fc6a056be64661f53df841802334341e4059776b7e77c764e622f2a56930c24ed8121
-
Filesize
298KB
MD586da78cb59576328483a11c6ef74bc2b
SHA100d62fbdc8d5dec4c659005e116d0ba2ee63b547
SHA256797e35f7f5d6020a5c6ea13b42ecd668bcfb3bbc4baa0e74773527e5b6cb3174
SHA512451f76349240540616007e02deffe5eb6c112846b1896f70ea6dfdbda24057da8af55febc98ae189db86b4c9dc6b14d8357a29a82a5de46a2154887d6dedc381