Overview
overview
8Static
static
6b74d99ebe9...18.apk
android-9-x86
8b74d99ebe9...18.apk
android-11-x64
8com.newpay...dk.apk
android-9-x86
1com.newpay...dk.apk
android-10-x64
1com.newpay...dk.apk
android-11-x64
1com.skymob...15.apk
android-9-x86
1com.skymob...15.apk
android-10-x64
1com.skymob...15.apk
android-11-x64
1com.skymob...09.apk
android-9-x86
1com.skymob...09.apk
android-10-x64
1com.skymob...09.apk
android-11-x64
1com.skymob...39.apk
android-9-x86
com.skymob...39.apk
android-10-x64
com.skymob...39.apk
android-11-x64
skymobi_pa...in.apk
android-9-x86
4skymobi_pa...in.apk
android-10-x64
4skymobi_pa...in.apk
android-11-x64
1unicom_resource.apk
android-9-x86
1unicom_resource.apk
android-10-x64
1unicom_resource.apk
android-11-x64
1Analysis
- max time kernel
5s - max time network
140s - platform
android_x64 - resource
android-x64-arm64-20240611.1-en - resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system - submitted
17/06/2024, 07:06
Static task
static1
Behavioral task
behavioral1
Sample
b74d99ebe9af2cf9cc0f84f47fddb815_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
b74d99ebe9af2cf9cc0f84f47fddb815_JaffaCakes118.apk
Resource
android-x64-arm64-20240611.1-en
Behavioral task
behavioral3
Sample
com.newpay.spsdk.smspay.zfmgsdk.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral4
Sample
com.newpay.spsdk.smspay.zfmgsdk.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral5
Sample
com.newpay.spsdk.smspay.zfmgsdk.apk
Resource
android-x64-arm64-20240611.1-en
Behavioral task
behavioral6
Sample
com.skymobi.pay.plugin.main_v10015.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral7
Sample
com.skymobi.pay.plugin.main_v10015.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral8
Sample
com.skymobi.pay.plugin.main_v10015.apk
Resource
android-x64-arm64-20240611.1-en
Behavioral task
behavioral9
Sample
com.skymobi.pay.plugin.recordupload_v10009.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral10
Sample
com.skymobi.pay.plugin.recordupload_v10009.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral11
Sample
com.skymobi.pay.plugin.recordupload_v10009.apk
Resource
android-x64-arm64-20240611.1-en
Behavioral task
behavioral12
Sample
com.skymobi.pay.plugin.smspay_v10039.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral13
Sample
com.skymobi.pay.plugin.smspay_v10039.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral14
Sample
com.skymobi.pay.plugin.smspay_v10039.apk
Resource
android-x64-arm64-20240611.1-en
Behavioral task
behavioral15
Sample
skymobi_pay_wxplugin.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral16
Sample
skymobi_pay_wxplugin.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral17
Sample
skymobi_pay_wxplugin.apk
Resource
android-x64-arm64-20240611.1-en
Behavioral task
behavioral18
Sample
unicom_resource.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral19
Sample
unicom_resource.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral20
Sample
unicom_resource.apk
Resource
android-x64-arm64-20240611.1-en
General
- Target b74d99ebe9af2cf9cc0f84f47fddb815_JaffaCakes118.apk
- Size 2.9MB
- Sample240617-hxdvzstcmp
- SHA256 9cb27a45cd414dd4016f25d49fcf1223027c150e06ea254151afdda9ed80a553
- MD5 b74d99ebe9af2cf9cc0f84f47fddb815
- SHA1 d081e4523b4f1eaa4fd2b07211b6b563745f5aaf
- SHA512 6a6c899bafb2a76ef60085a6128918d28e17bd2469f649df5bcf7b0ac15ae1743e51765f9d976465064dc1e4342db8a55c0994f57cddf14cfad3e1c3fd35c926
- SSDEEP 49152:yebEoRR/+UXgZNvxEDKJ84INrIQ7UDa6+We718RRvyyRvy0WrS:JEe+UsoKRINp+a6e18nJ0S
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Checks if the Android device is rooted. 1 TTPs 1 IoCs
ioc Process /system/bin/su aaBbO.hQhmsK.DYWN - Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/aaBbO.hQhmsK.DYWN/files/.ca/lWySsXg.jar 4506 aaBbO.hQhmsK.DYWN - Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses aaBbO.hQhmsK.DYWN - Queries the phone number (MSISDN for GSM devices) 1 TTPs
- Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo aaBbO.hQhmsK.DYWN
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/aaBbO.hQhmsK.DYWN/app_skypay_newsdk/plugins/com.skymobi.pay.plugin.main.apk
- Size 59KB
- SHA256 09a1eaa8ea5844ad9fa0cc8ac61848ad769d62bf90fa9b15d2aa21a9fc593413
- MD5 af3d9be42c31205f5c5835876219a080
- SHA1 94ee91f71c77d45efcbc3a5b41c1153b9eff2bf4
- SHA512 51903ef751775c31e4a1f5f1190deaee2d50c93d5e36968045c67e446c7545c1cb12f26575e9d741a258a5882fbe357ac1657f18b9eca995bd533700828eeff2
- SSDEEP 1536:+wSyx28ZQi8KwGltzgA4iPBUFOIWGpJj3CqgOwETU+gI9nuTk:+wnx//DwiSGgOW7Cz9yb9nuTk
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/aaBbO.hQhmsK.DYWN/files/.ca/lWySsXg.jar
- Size 979KB
- SHA256 d09ad588179caa7e0fef9b4c2da8c45c7334e21053401255a5343d41489803be
- MD5 064e7586271a5aea294ca64163dadf7a
- SHA1 fe7a0fbea5c24f768806e02fcdc30720b400012b
- SHA512 92657c78d6e016f083a997100d57c738f8716ad728165eb9547620e7889cf32987d6861566ca8e0a4dab31ab739f1c071b22df802da765401b246c1dbf321234
- SSDEEP 24576:UE6sKyB2Y3obhsGaSBPLqmH36MgrTe9CgqL/BtCz9vK+dZypHmXuRp:UyBj4bep2LqmHqMQKxe5gZ38F5p
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/aaBbO.hQhmsK.DYWN/files/.ca/lWySsXg.jar
- Size 2.2MB
- SHA256 3776b04872d50b53e1ff092be2198b03a6a4ff5246c08235b77728fa759a1642
- MD5 adfe16e131330733f1f0e6f3df909051
- SHA1 f8db963d973d4c8d809aa4c8eadcdf781d9096cc
- SHA512 69c01a549c00cc95ff9929ccfdb9f188a62cdd60b01385f7e2bb0c226638077bb50fccca734d7401d70e34b161c4d96216aedfd5c10e2d1fa33d78382b18361d
- SSDEEP 49152:K1H9c6+6nhTmPmgl3eBlQ7zqSqqqKmddAkoJ0XovHbeQwdY+mmoVe8vqTUvH3Kg0:OdwKOVGAu4P8
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/Download/channel_conf
- Size 5B
- SHA256 e929c4872d0dfcdbcb3569aaa7e40e0c89ce98e6f4a54c42f0733c70583556cf
- MD5 30e78bbe90e4fa00b725dbc54f11cf91
- SHA1 2123ba3a00b9062073322d3987a520f7925f725f
- SHA512 d0e73afdfb7a435f85c478349708ef6a2d8bd3c1a0d5348413c5239208af530293525c2845b137af6c31b8dc870ffc79552ed2c7aa0bc65cb2da205423b5e515
- MD5 SHA1 SHA512