Analysis
-
max time kernel
2s -
max time network
138s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
07/09/2024, 16:11
General
-
Target
d253ee720c2981297daad2bd8b149a65_JaffaCakes118.apk
-
Size
2.6MB
-
MD5
d253ee720c2981297daad2bd8b149a65
-
SHA1
e65bc4e7fb91d65e9e3bf1f58f45a572756a977c
-
SHA256
e7f6890d84132f2b531fd365a9f7a0267b258b55f263455775cc864f82e45337
-
SHA512
84bde4ff8cd096623a2220f1d8e53bfc6640dc136dd5302b2c3a064a63fd122dbc72f62bb0fde20f6b78df2bf4847797b1aee70cae2bca715b641efe96b27c17
-
SSDEEP
49152:v23Ei2Lnu2S9xphxvrymYb85EWBCkIannhfc3tBGAn2yf23IOYSsomtpnQi:v238u2SkmY4KWHnhfc9HSWFn
Score
7/10
Malware Config
Signatures
-
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about active data network 1 TTPs 1 IoCs
-
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
Processes
-
com.yxxinglin.xzid5715341⤵
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Listens for changes in the sensor environment (might be used to detect emulation)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information