Analysis
-
max time kernel
131s -
max time network
130s -
platform
android_x86 -
resource
android-x86-arm-20240611.1-en -
resource tags
-
submitted
16/06/2024, 00:02
General
-
Target
b0cda990bcd0894324a8d57c20d791b3_JaffaCakes118.apk
-
Size
524KB
-
MD5
b0cda990bcd0894324a8d57c20d791b3
-
SHA1
e6927a0bb44fe993b4341e2af45a6d8308cc139e
-
SHA256
3df303a3c88e7e312906915d14d2cbc588a2290bd50790843354c153999025b6
-
SHA512
36034aa52acfe31535e90ff0a11dd567ecf6b14e8338334c7a2e9016e5f99af82936fa533b96b2b4336ee273d32557ac83059a0fd07af5652186c36c105b2877
-
SSDEEP
12288:WVsNUc9sijDl1xiOeY4sHItBZBjgs/IDuvZsNQCCbU:W5c9sivgOb4sotNjgLuvNCQU
Score
7/10
Malware Config
Signatures
-
Queries the phone number (MSISDN for GSM devices) 1 TTPs
-
Reads the content of the SMS messages. 1 TTPs 1 IoCs
-
Queries information about active data network 1 TTPs 1 IoCs
-
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes
-
co.nfr.d.l.ck1⤵
- Reads the content of the SMS messages.
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)