Analysis
-
max time kernel
80s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
18/08/2024, 19:08
General
-
Target
a7dcee88aff81642d47b28fee29b3319_JaffaCakes118.apk
-
Size
8.7MB
-
MD5
a7dcee88aff81642d47b28fee29b3319
-
SHA1
78866dce78055cfc48640a93901939b71252f563
-
SHA256
ca90aec53f14794b3b8867f6ef3180ed69c4f0cd25cb4b4dcd2ff0a252eec844
-
SHA512
2cb1ac1f241652429747dc5dc15c639e3d1e3e68fb01ff8515b0ccccc214f734b87f43577bcb1e3c1e7b0d551bc85ab24b56a9dad2117f6b2e71f3bceb729a07
-
SSDEEP
196608:nj7TQ2YTCXeDh8/u44SQpXVj0AHF0EynHFVO+zoTa6:j782MCX81pXuO0PHFVSe6
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 TTPs 3 IoCs
Runs executable file dropped to the device during analysis.
-
Queries information about active data network 1 TTPs 1 IoCs
-
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes
-
com.free.mood.listenbook1⤵
- Loads dropped Dex/Jar
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
-
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.free.mood.listenbook/files/17240081243120.jar --output-vdex-fd=44 --oat-fd=45 --oat-location=/data/user/0/com.free.mood.listenbook/files/oat/x86/17240081243120.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
-
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5483444e1ba8425c1aebb8c0c57db5569
SHA1996dcbd79037ed57457e9ddb32d259b62a4bf2e1
SHA256e3f536833c8a7d979224ef6be25c3ecbf0bcb227a150d829894ca5cf1952c82b
SHA51238923e516018ed95c56697d438706483fe5094bd3b691471ee7f2716354e05d6410eb8701cca102667bd4c4ffc8320f1162178c0692ed925dd64877facf2dbed
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
32KB
MD5fc34469b9a5e38839464517f28ee0859
SHA19dc5344c6db772bce726838fa3d777f4e2d36b05
SHA25650b8a5e8ae374d82ce3d641b33842e09edab3dde2027fc173f35d0968616e40b
SHA51270f336bfdb4ebc9a3ce73d612fa3513f296868d21481fe790a3e8ad63e80a2886c9b54baed248b659a4640ba43ba5becd2465e65de2b25736a09dcaa57eb53ce
-
Filesize
60KB
MD5717abf087b987dff8abed70613a224b0
SHA1e2b55daf06a83f79d49b59c82c7238af63e46342
SHA256f308399e84a522b74567ae5bcafd128255622a22171354d2587e2e82c6d3b435
SHA5124cf21158d41538e8cb5625c9ed7ed5ab1c75b53704766363a1ab559e5f95adc6ba0b5d23385354a0e62d3b706452e84b8223bbc586b166ff8cc90adb574a5092
-
Filesize
91KB
MD57958e6386f47b0231858f0199ed2c80e
SHA18304a6f707d9d518f5026727c8633793f47f1b5d
SHA2569e2a4891ec4ae2774c15875cbcb2e25069c7e8d82f098abe754e75def964930c
SHA51255ae33a86bbf617262d9d1937124373655e0046462198a56f6663c606e59ab456c1a042029727a8ab66b8d7b3ad0bb6698a926e6de05846f8a2ecf93de25c282
-
Filesize
130KB
MD52a17646f5f97ca6143ee9c43d349b6c5
SHA1e275496bc326e736feff018b87778679a098aeef
SHA2569fc7ed2f95947f533fe44469cfc8e9a1f4fea5c26a9ec3cf060228be00269f36
SHA512779417af49ccfb00fcb42c5a1da593f63d6ef9d2de80a83e4fdbc93e7d5a29b5da1a34fb7b2dbf9f9b5fdc4b42740d0bfb80ad3716cf89dec59f0c50f1d382f5
-
Filesize
130KB
MD521b9de7504b2eb67b1dba78700ba6681
SHA19ecf5ce403b6eb9bed4ec89e808f900ef1d7db09
SHA25604e3643b6a92eecec86d5f2528b7549e751d59a6d017e98e02640da0fb61d27e
SHA51267d4b5222c15723b8f8483c482af2f04de2e6021f42f76938a5628d0cc36ec270eccfa1ff11b9dd6d924bede93b79fde052712d1b11f94d5ddf3de9b1e28bf03
-
Filesize
188KB
MD59a6b81058877f901b93a599eea1a6242
SHA1fc1f077d453602467a8a74756a347c10b77d0cbd
SHA25629c4a716369e93c98be7ee2e5cfe497598c6a30e5092a7c82425900128f81d45
SHA512ad4216323316f07be6d02fdf3130b9dfb504cc1d7fec97638f8f2bfcdfa416537f6818f2b5857d1597472ce04c292c468f9fa59e3f846619ffe9ab4b56902de6