Analysis

  • max time kernel
    19s
  • max time network
    136s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    15/09/2024, 00:05

General

  • Target

    e14ebdd5be99f4e6decfd85273805646_JaffaCakes118.apk

  • Size

    7.4MB

  • MD5

    e14ebdd5be99f4e6decfd85273805646

  • SHA1

    dcd8a2653bf06a48fff74137ec36eb420098584d

  • SHA256

    440c0a57d0ebb782e5368e84813133b0fe3597231ee248a11e96a58f89b168ac

  • SHA512

    b89e87858574e4fcde3326a8704fac053ab0a77f4a57adef7c4654894219b165a6fd922825da5d3a820740b2ac03108b7cd24619d7722f724a2c25e2729450e5

  • SSDEEP

    196608:wQu08IcJz2fcJz2/Gkhwa/wp3zcJz2je0ne0q0p/hyeo9taN1J0R2JGaUn61TS:/BcCcOhwkozcw1n1RpybtaN1J0b/6s

Malware Config

Signatures

Processes

  • com.tanwan.h5.myll
    1⤵
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks memory information
    PID:4257
    • getprop ro.product.cpu.abi
      2⤵
        PID:4287

    Network

          MITRE ATT&CK Mobile v15

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /storage/emulated/0/Android/data/com.tanwan.h5.myll/files/tbslog/tbslog.txt

            Filesize

            12KB

            MD5

            8b9c2aded411e98972c3c022b74aae78

            SHA1

            30fc886870747b7e1e21e8a19419d12ffc4032a5

            SHA256

            edda029782aa4d110974483578ba75d57bb65a1fd7da9a005e8444837f4e5016

            SHA512

            104c26c28a47744124d587b18078ef54217d44aca11a3093daddc777ffa8dcd5469c007cc6119b71c114ef68beffee0becc7cb3a82793149fd32316bf18216fd

          • /storage/emulated/0/com.tanwan.h5.myll/tanwanGameConfig.ini

            Filesize

            6B

            MD5

            fc82c89d70e617206bb6864a2e3886db

            SHA1

            18e55d3c05612ab02a0a6c26e2764e8739f43765

            SHA256

            a78899554c647cddc1f741c419543d6b40491e1a392697b754270f0b94147770

            SHA512

            8bf99ac70278b72ef210628a82a12851d9580a266593231e4e0f33f546414157ec40e00b6f47d78ba2418417fc80471f721ae3352534aeabb16bb2af3a993e82

          • /storage/emulated/0/com.tanwan.h5.myll/tanwanGamePlace.ini

            Filesize

            6B

            MD5

            c93a9b5c3f8ac494803b1f0a1b942a5f

            SHA1

            21170c69f6ef7b982aa05ca742b35c8d8cbc44bf

            SHA256

            c760199ce7ca20e0571c3b95d85ff67da6cca8dd5812d85ae5e56d239e8ff263

            SHA512

            4d479af78d7d4cf0d2ae9f3d40ce982342de46c0d91a258217200a761bf69f4413ce8632a63efb2d155a5a7820454fba081ce745354d7dbbbdcc869d097afdbd