Analysis

  • max time kernel
    177s
  • max time network
    184s
  • platform
    android_x86
  • resource
    android-x86-arm-20240611.1-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
  • submitted
    18/06/2024, 16:52

General

  • Target
    bcfa2209d11054733635892d7e649a0f_JaffaCakes118.apk
  • Size 3.2MB
  • Sample240618-vdjncasapd
  • SHA256 9f4c15a254c387f031f28ce6e1e78216d032a8eb4a4fef334056d44401577b55
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • com.wyp.awpj
    1⤵
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:4273
  • com.wyp.awpj:pushservice
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4377

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        pushsdk.db

        • Path /data/data/com.wyp.awpj/databases/pushsdk.db
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512

        pushsdk.db-journal

        • Path /data/data/com.wyp.awpj/databases/pushsdk.db-journal
        • Size 512B
        • SHA256 674cb68f3a569996ee7784aa3cf5405fd1798714346e5e22e5fb120f235d3227
        • MD5 SHA1 SHA512

        pushsdk.db-shm

        • Path /data/data/com.wyp.awpj/databases/pushsdk.db-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        pushsdk.db-wal

        • Path /data/data/com.wyp.awpj/databases/pushsdk.db-wal
        • Size 181KB
        • SHA256 a2a4b187e8e4b5e693976b6ee7257f93f11e3b19d90c4ae5656c7460510856d5
        • MD5 SHA1 SHA512 SSDEEP

        init_c.pid

        • Path /data/data/com.wyp.awpj/files/init_c.pid
        • Size 80B
        • SHA256 a5c3a63ca84f58ec285a39a8028cb8110a9b94ed80f68c13a800906c82468646
        • MD5 SHA1 SHA512