Analysis

  • max time kernel
    127s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    30/09/2024, 10:46 UTC

General

  • Target

    00ec2ab814170e9839c5b3f283d15e19_JaffaCakes118.apk

  • Size

    5.2MB

  • MD5

    00ec2ab814170e9839c5b3f283d15e19

  • SHA1

    a5f789c7d8942e7f2c0fc9a2b00723e2615829b9

  • SHA256

    03ebb4ac972e3375d1f6cebf60cb0d9c3ba4e4489e78561ea1764ea087b53776

  • SHA512

    3b89ae9191d3cc0322b3192a4691384d39908b5f1cc246fad83966fdb257b53462657f053f38d2bf9d614edbee20407174c9c2bdb0a732de559de6f48396ac24

  • SSDEEP

    98304:ekSyzwAkyDo6b+BKmALq6IAlDwkuhpPbiMpJdeup3gELvsYKPIR4yytOo8pZ:ekxwEcY+BKmwq6dl8kIpD/pJde03guUg

Score
1/10

Malware Config

Signatures

Processes

  • com.grub.sryl
    1⤵
      PID:4492

    Network

    • flag-us
      DNS
      android.apis.google.com
      Remote address:
      1.1.1.1:53
      Request
      android.apis.google.com
      IN A
      Response
      android.apis.google.com
      IN CNAME
      clients.l.google.com
      clients.l.google.com
      IN A
      142.250.187.206
    • flag-us
      DNS
      app.mobioffers.ru
      Remote address:
      1.1.1.1:53
      Request
      app.mobioffers.ru
      IN A
      Response
    • flag-us
      DNS
      ssl.google-analytics.com
      Remote address:
      1.1.1.1:53
      Request
      ssl.google-analytics.com
      IN A
      Response
      ssl.google-analytics.com
      IN A
      142.250.200.40
    • 142.250.187.206:443
      tls, https
      1.5kB
      40 B
      1
      1
    • 142.250.187.206:443
      tls, https
      1.5kB
      40 B
      1
      1
    • 142.250.187.206:443
      android.apis.google.com
      tls
      5.5kB
      8.8kB
      22
      23
    • 142.250.187.228:443
      tls, https
      846 B
      40 B
      2
      1
    • 142.250.187.228:443
      www.google.com
      tls
      11.3kB
      13.6kB
      33
      39
    • 224.0.0.251:5353
      3.7kB
      11
    • 1.1.1.1:53
      android.apis.google.com
      dns
      69 B
      109 B
      1
      1

      DNS Request

      android.apis.google.com

      DNS Response

      142.250.187.206

    • 1.1.1.1:53
      app.mobioffers.ru
      dns
      63 B
      123 B
      1
      1

      DNS Request

      app.mobioffers.ru

    • 1.1.1.1:53
      ssl.google-analytics.com
      dns
      70 B
      86 B
      1
      1

      DNS Request

      ssl.google-analytics.com

      DNS Response

      142.250.200.40

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.