Overview
overview
8Static
static
6bb1ab6ce6f...18.apk
android-9-x86
6bb1ab6ce6f...18.apk
android-10-x64
6bb1ab6ce6f...18.apk
android-11-x64
6PandaHome2.apk
android-9-x86
8PandaHome2.apk
android-13-x64
com.nd.and...me.apk
android-9-x86
1com.nd.and...me.apk
android-10-x64
1com.nd.and...me.apk
android-11-x64
1com.nd.hil...ac.apk
android-9-x86
6com.nd.hil...ac.apk
android-10-x64
7com.nd.hil...ac.apk
android-11-x64
7com.nd.hil...ca.apk
android-9-x86
6com.nd.hil...ca.apk
android-10-x64
7com.nd.hil...ca.apk
android-11-x64
7nd.apk
android-9-x86
nd.apk
android-10-x64
nd.apk
android-11-x64
Analysis
-
max time kernel
44s -
max time network
149s -
platform
android_x64 -
resource
android-x64-20240611.1-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system -
submitted
18-06-2024 06:29
Static task
static1
Behavioral task
behavioral1
Sample
bb1ab6ce6f0e4e56baafe4f311b89511_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
bb1ab6ce6f0e4e56baafe4f311b89511_JaffaCakes118.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral3
Sample
bb1ab6ce6f0e4e56baafe4f311b89511_JaffaCakes118.apk
Resource
android-x64-arm64-20240611.1-en
Behavioral task
behavioral4
Sample
PandaHome2.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral5
Sample
PandaHome2.apk
Resource
android-33-x64-arm64-20240611.1-en
Behavioral task
behavioral6
Sample
com.nd.android.widget.pandahome.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral7
Sample
com.nd.android.widget.pandahome.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral8
Sample
com.nd.android.widget.pandahome.apk
Resource
android-x64-arm64-20240611.1-en
Behavioral task
behavioral9
Sample
com.nd.hilauncherdev.plugin.browser_V_4_M_f098eb78edf38f1234dbc177c54037ac.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral10
Sample
com.nd.hilauncherdev.plugin.browser_V_4_M_f098eb78edf38f1234dbc177c54037ac.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral11
Sample
com.nd.hilauncherdev.plugin.browser_V_4_M_f098eb78edf38f1234dbc177c54037ac.apk
Resource
android-x64-arm64-20240611.1-en
Behavioral task
behavioral12
Sample
com.nd.hilauncherdev.plugin.navigation_V_15_M_f9116e80f80655ce754d9e54d0da57ca.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral13
Sample
com.nd.hilauncherdev.plugin.navigation_V_15_M_f9116e80f80655ce754d9e54d0da57ca.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral14
Sample
com.nd.hilauncherdev.plugin.navigation_V_15_M_f9116e80f80655ce754d9e54d0da57ca.apk
Resource
android-x64-arm64-20240611.1-en
Behavioral task
behavioral15
Sample
nd.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral16
Sample
nd.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral17
Sample
nd.apk
Resource
android-x64-arm64-20240611.1-en
General
-
Target
bb1ab6ce6f0e4e56baafe4f311b89511_JaffaCakes118.apk
-
Size
14.1MB
-
MD5
bb1ab6ce6f0e4e56baafe4f311b89511
-
SHA1
8684f61afb4f3478ac7bedf7840ee4c45ac07dea
-
SHA256
c41f292bdad54f5098db9ff52bf194db4359e5961bc7c007eb542de606ed267c
-
SHA512
3fe364643831b0d9a216f472a5c0d14b0bf6eb56000e492a71358def0ed481ca702f8ce6b86835b64192c14cae54ee1a772d0c03b42e439df99ee18e31477fe8
-
SSDEEP
393216:+EL2zZ8fbkY5we6WT1p5efdrjc/F3+QRBc:+kOZZOwe6hfVA3Nvc
Malware Config
Signatures
-
Requests dangerous framework permissions 14 IoCs
Processes:
description ioc Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to read SMS messages. android.permission.READ_SMS Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE Allows an application to send SMS messages. android.permission.SEND_SMS Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether. android.permission.PROCESS_OUTGOING_CALLS Allows an application to receive SMS messages. android.permission.RECEIVE_SMS Allows an application to record audio. android.permission.RECORD_AUDIO Allows an application to receive SMS messages. android.permission.RECEIVE_SMS -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes:
com.nd.android.pandatheme.p_nishiwodexiaoqingge20160517description ioc process Framework service call android.app.IActivityManager.registerReceiver com.nd.android.pandatheme.p_nishiwodexiaoqingge20160517
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8.8MB
MD5d52af404601b33fac02028654cfc88c8
SHA1b6359994d480201a2cb01b1afb71d4cc0a340ee3
SHA25668db3de09804f06e2179f97c1c890205efcc6b8999f123f421f3428b3f76b83c
SHA512d4783c455bc1c5f61ab7d2adb1c00db2259a0f8eb552d4aca9880904e020ea3f98e91b15ea2a1b5b611f06fe6e4a65805e2742c1ff761ad2612c21faad6fb013