Analysis
- max time kernel
179s - max time network
177s - platform
android_x64 - resource
android-x64-20240611.1-en - resource tags
- submitted
17/06/2024, 03:35
General
- Target b6908d5b96a81b180e4b608f7025bb3e_JaffaCakes118.apk
- Size 692KB
- Sample240617-d5v21swgnl
- SHA256 0546af2e35fcda21cd2db1a785d5b9356fd45ebad06e5a49d3d1a478f1fe3c4a
Score
8/10
Malware Config
Signatures
- Removes its main activity from the application launcher 1 TTPs 1 IoCs
- Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
- Reads the contacts stored on the device. 1 TTPs 1 IoCs
- Reads the content of SMS inbox messages. 1 TTPs 1 IoCs
- Acquires the wake lock 1 IoCs
- Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
- Reads information about phone network operator. 1 TTPs
Processes
-
com.cwapng.bybhktk1⤵
- Removes its main activity from the application launcher
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Reads the contacts stored on the device.
- Reads the content of SMS inbox messages.
- Acquires the wake lock
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
lcaurg.jar
lcaurg.jar