Analysis

  • max time kernel
    2s
  • max time network
    132s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    23/08/2024, 23:30

General

  • Target

    bd9018a484b439f2ef8f743251806478_JaffaCakes118.apk

  • Size

    27.0MB

  • MD5

    bd9018a484b439f2ef8f743251806478

  • SHA1

    e21bf44d61f51732be3b9b0c212f656e932cff89

  • SHA256

    371b18df0c59b4cb74a046f239093eabb7532ecb94b5bdaf39b154a6e1f60806

  • SHA512

    aff8ef54b8ec38b590e6081da002072dfb4ca5a14a1b0c7000b8845378da3212d049b0629f618dcc1dd59f499d0304b3015d11390aa3ee9d4f5e25b414b8d6ac

  • SSDEEP

    786432:2/EojcfbLNy5N+6ZcOutZSFhkpgAPJgflIzeu5QOwa8rv:2sojQ45NbZ9uskpg8JgfllyQcM

Malware Config

Signatures

  • Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

Processes

  • com.dalianshenlanyouxi.dmdsj.vivo
    1⤵
    • Checks Android system properties for emulator presence.
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4258

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.dalianshenlanyouxi.dmdsj.vivo/files/vivounionsdk/vivounionsdk.res

          Filesize

          29KB

          MD5

          7a92466708fa1ae45c5585a5b986f5aa

          SHA1

          e9e8e0dc60208b7a8b64a65550442a73f1166c30

          SHA256

          cc8416f87003538f2c8ea5280a7eaebfb40597b6ebdcc33c4fa64b0cf08d3b73

          SHA512

          026dec17ed60d89257c8cb7873a0ccc0de910aad6706f1bbb7936229d7074b9542b7b80a2040f466c64e6cf8896e8531ee01ed7acbfa6a7ed90637a5fe2d477d