Analysis

  • max time kernel
    7s
  • max time network
    138s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    01-08-2024 21:04

General

  • Target

    81c435459e8b8d24e144d33e924eac92_JaffaCakes118.apk

  • Size

    9.8MB

  • MD5

    81c435459e8b8d24e144d33e924eac92

  • SHA1

    94533622319010b58871fcdde27f0b48f05c5b58

  • SHA256

    4e8a56e810edccfc9b8ebfef9b6d92bee819e51b08fbf3e3b8ab8afbc3b3c1e6

  • SHA512

    7868a0d932633f09f00d63e344a86dfe8cc61d2662b6561b6bb1e36d154509138ae5db6b589461bad6d2f0537a0834914511b5c81f160a42aa75dff66757f311

  • SSDEEP

    196608:20P38G01sgsN08CPmEroCsXn5jhPfcQu8X/VlgDF06lrDW/uMQuM7v+Lv:W11s/NHCPm2s3PsRm7M7v+Lv

Malware Config

Signatures

  • Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

Processes

  • com.linhe.jsdfx.vivo
    1⤵
    • Checks Android system properties for emulator presence.
    • Queries information about running processes on the device
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4263

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.linhe.jsdfx.vivo/files/vivounionsdk/vivounionsdk.res

    Filesize

    29KB

    MD5

    7a92466708fa1ae45c5585a5b986f5aa

    SHA1

    e9e8e0dc60208b7a8b64a65550442a73f1166c30

    SHA256

    cc8416f87003538f2c8ea5280a7eaebfb40597b6ebdcc33c4fa64b0cf08d3b73

    SHA512

    026dec17ed60d89257c8cb7873a0ccc0de910aad6706f1bbb7936229d7074b9542b7b80a2040f466c64e6cf8896e8531ee01ed7acbfa6a7ed90637a5fe2d477d