Analysis
-
max time kernel
4s -
max time network
134s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
19-09-2024 06:50
General
-
Target
eacaf3b68dc57e0b280f9e4e086a6182_JaffaCakes118.apk
-
Size
8.6MB
-
MD5
eacaf3b68dc57e0b280f9e4e086a6182
-
SHA1
d541645113fea324dad16564c34d42060438fa93
-
SHA256
8ff6747322ae1b18f6d3146b76f6440b84bed2da4caba6f14c4ec362463bd725
-
SHA512
2bd0bf6de5b7b23020698cc38fad9b3bfae06f1e9ff6812e367b52f12c803e59d71ef070456678f1e9c3542d2106c60ae0702378ff8fb6bc5a2007189b0b9d75
-
SSDEEP
196608:+/ETpht2z9Lr7sUjRN1j4PtsFGep2SF1AqVxe5dsOQD11w7:+/ETF2z1TjbpbvTVCQR1c
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 2 IoCs
-
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
com.senxing.app.android.article.huawen.news1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks memory information
-
/system/bin/sh -c getprop ro.board.platform2⤵
-
-
sh -c getprop ro.yunos.version2⤵
-
-
getprop ro.board.platform2⤵
-
-
getprop ro.yunos.version2⤵
-
-
/system/bin/sh -c type su2⤵
- Checks if the Android device is rooted.
-
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD58c2869ad97ae107762e6cd6d9bde6b92
SHA1e737f9afdd9657e9b194fcd6ad00f1e8e60da123
SHA256b40ea1594443bad31d82f48ae56a2bebf1207153441344796b692c40eec14112
SHA512ebf4391de58940c470007fc7a20072236a5e2416df576529bd36ad1689c311090b0c801dea06db1e6318b182688c7e0e22e4373751bd07a1a036a3f8a6a350ce
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
92KB
MD52e9dbd0d3b2df9290b938af27ed1e316
SHA112bda1714c1430077361a310e8bb385be88607e7
SHA2567d337a3ba02636979544ffb78a914353d4306ec0dacc49598d824a26b31ed58d
SHA512e2e12844573d40898f8bea44d872202ee2372e98129b8cc2b53d33f9a816289834c4458363a3387a0b6ab419349d6494961e835e3ea4a38ca835c88b93eeb112
-
Filesize
292B
MD563f77f99bd2c2b772a479923bde11974
SHA1c7632e7d301e4463fafce85f84e9c3d7da3fdbbe
SHA2564c76a3af64cdd2f8713ffe2733dea50dbe714d0ca41c17d1847ee5b62a7ca615
SHA5123aae4a89d1ed51fdd911cb367eb10afe3c2264e4222085891b18a60d5412f85d10bf5c8f3c6642db70abb9aa42732bac5c42c42ee32d587100f53c21b5beb16c