Analysis

  • max time kernel
    135s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    29-08-2024 16:40

General

  • Target

    c934ff16ad18719a90cec2d44e408961_JaffaCakes118.apk

  • Size

    2.7MB

  • MD5

    c934ff16ad18719a90cec2d44e408961

  • SHA1

    de88e6268e3e7be75846eeae67789b5240f8fa9e

  • SHA256

    4a58c4af5dd16e06fa2c080487b8fef30cabc917b33d45800f36da27ab5ad806

  • SHA512

    bdcf6c98a44110746362dccde27302848c2172bc1a5752c6927c42c61546861848ebc7454f62858a7a0ad824cc40b4e0aa23d5a9e2d7d80b10e231a060c75e9c

  • SSDEEP

    49152:2eCZgfRWQK4IMUrFWq6pZaKusjTKS++6MrN9LapA62XaxvC4uVXaWBqoB/B9Y:2/ZgfTKbd0Bp6MTKmlspArXahaXRBVBy

Malware Config

Signatures

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.sszj.ly
    1⤵
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks memory information
    PID:4245

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /storage/emulated/0/Android/data/com.sszj.ly/files/tbslog/tbslog.txt

    Filesize

    2KB

    MD5

    6ae822379f17c37ba19d5831b4260d53

    SHA1

    c8e565ddc81d17fcf027afa4b2f5099b6244f117

    SHA256

    be8de6c16db40ab4f4c929ece502ce2cf139041ffb853e9364263118924356e8

    SHA512

    a33f1664d0bab8be4bae2024e31d8b4f5ae62a21ba5f417227176020539287c4b1c9d3a3701241a719c032013d60fc0deaef9b31e4b4377c0e389e653bad9c3d