Analysis
-
max time kernel
19s -
max time network
136s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
15/09/2024, 00:05
Static task
static1
Behavioral task
behavioral1
Sample
e14ebdd5be99f4e6decfd85273805646_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
General
-
Target
e14ebdd5be99f4e6decfd85273805646_JaffaCakes118.apk
-
Size
7.4MB
-
MD5
e14ebdd5be99f4e6decfd85273805646
-
SHA1
dcd8a2653bf06a48fff74137ec36eb420098584d
-
SHA256
440c0a57d0ebb782e5368e84813133b0fe3597231ee248a11e96a58f89b168ac
-
SHA512
b89e87858574e4fcde3326a8704fac053ab0a77f4a57adef7c4654894219b165a6fd922825da5d3a820740b2ac03108b7cd24619d7722f724a2c25e2729450e5
-
SSDEEP
196608:wQu08IcJz2fcJz2/Gkhwa/wp3zcJz2je0ne0q0p/hyeo9taN1J0R2JGaUn61TS:/BcCcOhwkozcw1n1RpybtaN1J0b/6s
Malware Config
Signatures
-
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.tanwan.h5.myll -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.tanwan.h5.myll -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.tanwan.h5.myll -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.tanwan.h5.myll -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.tanwan.h5.myll
Processes
-
com.tanwan.h5.myll1⤵
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:4257 -
getprop ro.product.cpu.abi2⤵PID:4287
-
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12KB
MD58b9c2aded411e98972c3c022b74aae78
SHA130fc886870747b7e1e21e8a19419d12ffc4032a5
SHA256edda029782aa4d110974483578ba75d57bb65a1fd7da9a005e8444837f4e5016
SHA512104c26c28a47744124d587b18078ef54217d44aca11a3093daddc777ffa8dcd5469c007cc6119b71c114ef68beffee0becc7cb3a82793149fd32316bf18216fd
-
Filesize
6B
MD5fc82c89d70e617206bb6864a2e3886db
SHA118e55d3c05612ab02a0a6c26e2764e8739f43765
SHA256a78899554c647cddc1f741c419543d6b40491e1a392697b754270f0b94147770
SHA5128bf99ac70278b72ef210628a82a12851d9580a266593231e4e0f33f546414157ec40e00b6f47d78ba2418417fc80471f721ae3352534aeabb16bb2af3a993e82
-
Filesize
6B
MD5c93a9b5c3f8ac494803b1f0a1b942a5f
SHA121170c69f6ef7b982aa05ca742b35c8d8cbc44bf
SHA256c760199ce7ca20e0571c3b95d85ff67da6cca8dd5812d85ae5e56d239e8ff263
SHA5124d479af78d7d4cf0d2ae9f3d40ce982342de46c0d91a258217200a761bf69f4413ce8632a63efb2d155a5a7820454fba081ce745354d7dbbbdcc869d097afdbd