Analysis
-
max time kernel
179s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20240611.1-en -
resource tags
-
submitted
17/06/2024, 04:17
General
-
Target
b6b6da0bbea6ca80acc4d2c32350571c_JaffaCakes118.apk
-
Size
10.0MB
-
MD5
b6b6da0bbea6ca80acc4d2c32350571c
-
SHA1
50839492f419121a77d11573d0f6ce933379fb19
-
SHA256
efdabc4da7ecb11af4a44b69ec7292be4dd9578e6e16ee9709c478c0fd86a423
-
SHA512
f58e277416d85c28274f2d82ff9b7289bf055a9be580d5f0601aa46926ecd4a8fabcc97e1b5ba791264738ff262e89fac3eea1af02ba4198b3d2482163290f56
-
SSDEEP
196608:eOuFWUFtXnz2Z1lGuGTp/8nV5uDgT1nQtcMNUpRjQ7N1KHWR4lPFp:eV6lGuGN/WegZQtcXRjuHxS
Malware Config
Signatures
-
Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
-
Requests cell location 2 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
-
Queries information about active data network 1 TTPs 1 IoCs
-
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Reads information about phone network operator. 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes
-
com.yinyuetai.fangarden.two_pm1⤵
- Queries information about the current nearby Wi-Fi networks
- Requests cell location
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Uses Crypto APIs (Might try to encrypt user data)
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5ab8ca34697756de7fbe85bbf3b725c58
SHA14363a339c6302786f7c1c482b948380fade05b9b
SHA2569e5bb80b4c2e7913ea5f00b3e6500bcb4938b81063c5eb740cf14c5c37119414
SHA51277ba57071d25e572455cdc65e520805234b23f9a178bdbbae91a56e8e6c61a8c7d6aec66ee59d6984fbedf063a7ac81d732c5ebd3078916a7e8a74454ea7423b
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
84KB
MD53be6a9bb1328104e5a6cb83f4e37d4b2
SHA197e90c111a33a3a175ec71bbf164981695dbe3e9
SHA256a1c520f5521489304102251117f2aef96af570e3f59955d7a554f8bca9e7f70a
SHA5123a78a61457e5ed1896b9be232e672edce847c2da9f53f0903892b0c72c900d4b5eae340ab7d916a27b4e71f1c28ca2b7ac0a4f2bf1bd262abc62e0572bde9bc0
-
Filesize
115B
MD522db372a7623da89d40e5e21d5d093a0
SHA16eea465772492c413d73f9762ac2129aef3bc952
SHA256d5220ce8e714b05e0633b7f5a9de6bb1fb99a94790fd1f13ead9da069be9da80
SHA51204c41271c89022008255975a91fd858d55c03ee5e4e3b2327d06964a90ab0b0026a0756da99dedcfb1579229320292876047db198ed5c4e6443b002d7d54cbd3
-
Filesize
25B
MD52d805b13f2f28dc3ca9bbcc000f49bb5
SHA19eac165b4d81258fd3967cde5cc53b53b1dabcb1
SHA256c8a6624f390568f0ddcb9841336aec6a564460fdaf6624e562b32935b8956f19
SHA5125db8c57bab36bcf9db698c1dce70318cbffc156dd1d1c1e09e5b7ba60aff07b598ebbf26c4bd8a2b03bd6e59ef2dde2d944a22a8d8a19ecc8378e83afb7c83b0
-
Filesize
89B
MD5675bcb7cdf1f86bf4dce4e8f5c08bba1
SHA1b2dd32d8b60a25f44cf04513aecf28317401a1d2
SHA256279b04338dd6bf0f8b0c7648489bdb7c97a5f10c1a9d1fa498316239639e72ed
SHA512a68580b4739848b92bee6a827e0fb563d07b684a5f28beadc7ebcdb89e07d9965b262a7722e37299da2b9fba45a30e49ba75ac1ca79123a737f16bfc9714cafa