Analysis
-
max time kernel
135s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
29-08-2024 16:40
Static task
static1
Behavioral task
behavioral1
Sample
c934ff16ad18719a90cec2d44e408961_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
c934ff16ad18719a90cec2d44e408961_JaffaCakes118.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
MogePay.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral4
Sample
MogePay.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral5
Sample
MogePay.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
c934ff16ad18719a90cec2d44e408961_JaffaCakes118.apk
-
Size
2.7MB
-
MD5
c934ff16ad18719a90cec2d44e408961
-
SHA1
de88e6268e3e7be75846eeae67789b5240f8fa9e
-
SHA256
4a58c4af5dd16e06fa2c080487b8fef30cabc917b33d45800f36da27ab5ad806
-
SHA512
bdcf6c98a44110746362dccde27302848c2172bc1a5752c6927c42c61546861848ebc7454f62858a7a0ad824cc40b4e0aa23d5a9e2d7d80b10e231a060c75e9c
-
SSDEEP
49152:2eCZgfRWQK4IMUrFWq6pZaKusjTKS++6MrN9LapA62XaxvC4uVXaWBqoB/B9Y:2/ZgfTKbd0Bp6MTKmlspArXahaXRBVBy
Malware Config
Signatures
-
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.sszj.ly -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.sszj.ly -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.sszj.ly -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.sszj.ly -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.sszj.ly
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2KB
MD56ae822379f17c37ba19d5831b4260d53
SHA1c8e565ddc81d17fcf027afa4b2f5099b6244f117
SHA256be8de6c16db40ab4f4c929ece502ce2cf139041ffb853e9364263118924356e8
SHA512a33f1664d0bab8be4bae2024e31d8b4f5ae62a21ba5f417227176020539287c4b1c9d3a3701241a719c032013d60fc0deaef9b31e4b4377c0e389e653bad9c3d