Analysis
-
max time kernel
179s -
max time network
151s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
11-08-2024 01:28
General
-
Target
88762a667afe69f9e14108b529702f5d_JaffaCakes118.apk
-
Size
1.5MB
-
MD5
88762a667afe69f9e14108b529702f5d
-
SHA1
05374ae36834c3736843d56eb02b4edac04a52e5
-
SHA256
546777d0488bb8a8a001b9cc0d7fc2169fc5c8c30fcdc3d4183d6c23ce88c9ed
-
SHA512
3559034edc5b28174d6cfddd86ce66b88ed0f0725355980d343f60cccf915658f8db14ae46fe39760431be92252b9cd52a051248f197806080c4cc928810fcf4
-
SSDEEP
49152:lAd3Q1NDKHZDNmJGXLYJYCz3cMOZ5ZXjtx5bcID2odr0:l8SDKHZDNmJGbYJYCz3cr5ZXjtx5bcIc
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 TTPs 3 IoCs
Runs executable file dropped to the device during analysis.
-
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about active data network 1 TTPs 1 IoCs
-
Reads information about phone network operator. 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes
-
com.zhangshanghuaban.oku1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
-
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --compiler-filter=quicken --dex-file=/data/user/0/com.zhangshanghuaban.oku/files/v.jar --output-vdex-fd=48 --oat-fd=49 --oat-location=/data/user/0/com.zhangshanghuaban.oku/files/oat/x86/v.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
-
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
22KB
MD5d73ac1e8603c9212c8d7bd0efd555ecd
SHA10d3a248ce2541ca4952e7bfc3f1a7d46ef1c384e
SHA256560d25284546e0bde690b859b5d9bbe1e1b8ec924524b929674305935c80a107
SHA512acd304c4237efe3537af363caabc17f135e78f12801094e62df1e3dc260549acf7fccf51eedfb5c57d12c1b2f503244007c222411792d3b4a3e5c2f72d771949
-
Filesize
71KB
MD5146a650dd469a6b6391f560eeabdeb0e
SHA125e20b3bfe93d7c16c6bb21e65942a58e6ce6bf2
SHA2566756084a60a3b21dc9ad595ab336ef3b2b6f5c0039f7de1463f61f8a58de4de4
SHA512d72dfc7aeefb2d77e46e0b5323c77bedd3a75c2cd670ce382c6a0dd894105aa42d9056909abb94dde007424f1a877478e96f8e5a5831aa48a21b5057c1e7193b
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD514be4bc9347add398a8e2d1cbfc7a2ff
SHA109ee8fe1a44e70014bd18acfc66333d4abcd171d
SHA256a64114d96f295e9232f6118b70369fe6d8ea0229689f66de427774190defc352
SHA5126c435b383256f177e3e0f2e925f6450f5ddfb437a890a6b2e29ae161f61701ecc175788318db795ba79b0a04c61053c32ea747ec166e2226be737e2f26ca535e
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
68KB
MD5b5eba62e06f05ebb541cfb56a301412f
SHA1f6f67c47e15a4b22adeed398d96057c7cfec13a6
SHA25633951fead8503b54784279b816b3653cc67d6e4758b30b7c554ba48660d69f24
SHA51217b0ea062d5d45cedd893348bc7168f6ec4d2d08a923a8006c4310fd084cbf7023f5098999acecf6077582d5517c72cdf1df775b470499f822af50faea08e0f5
-
Filesize
1KB
MD578ddb266cdc8c7582f65d90a67eafd99
SHA148efead7e31c97cf645fc4acb425a86ce535d949
SHA2563cd4ad0a973b0e09b3fdf36cafc12d8ba714bfa949180f0494ef95e13f56bbe0
SHA512f6ae51a33816c20e03a54dfd69ee935f48234048ea05e36ce4955c3a1fc298db3d9644e160237569183b70b36b73749a16543f14856e73e6df1d1369b683d945
-
Filesize
1011B
MD5a52e5ff214ce88cea6aa5097b9853933
SHA1750a9d43cabc258ea8459c8061cd5451ca3a211f
SHA25642877dc2de4baf560acf2943cb797af78655811cd0cfb6b297b527dddf994948
SHA512454b724aaae953d14bdd642edfdfd379d4e27a03d23ffa8c1c2f882b4c3f000dcc54f4ac58aff8cff2409c5e8c146c060d6dd7b931655f63131050f249686f90
-
Filesize
216KB
MD5fe71b6c9a4117f12b923af8caa5477cd
SHA1d6fbb703874344fff8a7f2ddaa4c108b7053bb56
SHA25617e7f434df38c948be4e534bea8083eb63748190b8fd4c2f760428a8b563e1a7
SHA512f44e02d5d19c6e488b268ad4c90a00df3e33569f5398a68e472151da49bcbddd3568f392f4b119cd833a4e32357f39f4a4cfd4470dd7150362f03708aa3e67a6
-
Filesize
59KB
MD5aabcab5764a2c245f66f05275409d9ac
SHA170025f9a50f5741874e7ba414065d839050b55de
SHA2568c8323abb7822bc8faddd358956746fb66451b64f7add56a124e78fc614561b1
SHA512fff399b665c673d83f25ec7ff16bb3f07a7395d45dd106fe1857fb8f1920e9a98c6b60ba90d1f95d76b3d671e27349cdb3abc6a1b1f3b7b46a4f1c0020e22071
-
Filesize
387KB
MD51245033872890b8f19e19962a2b24946
SHA18b011191a8a60c6dba6f1fc81b831a6e04a469ec
SHA256e6a1789d2b6156134d800698d36fb04ec59ff65a7184e9e9ee66dc5acbe8ae7c
SHA512b59d9f8aec6e8454adb06d7608d20fed2c5da8962739118eab6275f119f8939e7dd6980cddb36160033681091ddc9d898d92d5bd8abfa4393d2a69fa55c7aaf0
-
Filesize
387KB
MD538e927343d1622adfa93aa7ce49df149
SHA1b56f701e5f2adbc65c017782cffd4c0f85c7ce2b
SHA2567a056f8a0049af54c7b6938a8552c2591a836648a8b1966a6e8341982bcb7c99
SHA5121977f7e8796c7e9ea79dff9bd57fef0502757569b43f38198d9fb2768c0c2b45a0841a9ecd2361d972349caa34c1f6bde2d7b2fd439af0fcdca28d68f578fc6f