Analysis
-
max time kernel
148s -
max time network
152s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
01/10/2024, 17:06
General
-
Target
06a8135c11c873c04a3919aace3c75c7_JaffaCakes118.apk
-
Size
3.0MB
-
MD5
06a8135c11c873c04a3919aace3c75c7
-
SHA1
693838fdd81ad35990695efa07f9f005d36796ef
-
SHA256
2ea0243299aa9caf03534c90f0d7868093db0097e6912076f00dd8a10aa5046d
-
SHA512
a160b660ffbb5d729b15f0d9a3310cec925c5c47ffbdce11eceb504e2cae5574e7084801f4bab1a7e526cd54163d88664632adec4382db9865889afd96984e0c
-
SSDEEP
49152:v5CbzepPKt63sxtuCXxTurvEtxplFeoiT01w6TFxe/g5ddd:v5UzgKjtuCXx5m/Q1nTFkGdv
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 2 IoCs
-
Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
-
Requests cell location 2 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
-
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs
-
Queries information about active data network 1 TTPs 1 IoCs
-
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Reads information about phone network operator. 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
com.knightli.book.jokebookseries.m31⤵
- Checks if the Android device is rooted.
- Queries information about the current nearby Wi-Fi networks
- Requests cell location
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6KB
MD570506ae47fdef6ec7bb2baec98838b14
SHA16425d357e0658987f13ee4928920bf5763bbb029
SHA25668e6afc8b71918d5d66ed059ad44aa6452dfecb4cfaa0aea18e33b974c956275
SHA512a0dd1d0cd4a2dfdc4f339bde96ccfc7ad114466214abe64b878a3a08db10e7a82e8d2704ef8afe6d9dd3f18ac409ced5f73a440ebe92a87edf143310a30273d7
-
Filesize
204B
MD59659577a82eda4dfcf544e2042f9c86b
SHA1afb7ae281f4c662099a7fd1ec43133b9f9a7cfcc
SHA256c8b36203bb8fa287dcf90e3879ff2e5c1b12ded1ab4961f28f82506520dbb9fd
SHA512980967cf10e04d2248bf716172b19ce43f77b8641624fb0e091551d0f845ce662c41b6bf146859055ea44afef3ccea2847a4dc91d791c0727081de638bec7285
-
Filesize
955B
MD5fb325eb4b3d83ceec68449bfcf8f805f
SHA159fef4615a3d6d9aaffd139520aa08a85d7dc3a0
SHA256145175544df77f574ab5f5cea73aaeb5f1a6b4dd28f0bb4f58a7d553553a751c
SHA5120e68e0b1a12da2287e07e32f65688b8f11fb07ca1681446ad871ec63a02a7419c7acb959b5ca4afde07d13337f3cdf3598dbe9bd198630f4c72af658656f850f
-
Filesize
1KB
MD5e7cf41d926a191b1f1734968da2bd913
SHA1f9024a04126c0036e62ff378ac9916b8981a9daa
SHA256ef2d092f77c2a9c87fb70e99895f338507e5502247b88785d8bf6b660f3bad0a
SHA5128d493b546edacdf6a1391852bac53a04f685d0b5b20fab521deb4bb80fb14688daa02d09d39b5dc7a559ab0feed3fb864ab4b15f4594110d1d8cfae008e4347d
-
Filesize
15KB
MD58762b9f265f35145ab8c53b02ff3eec0
SHA1f395207eb2f7ad386aea8b6c58ba069d8d54c545
SHA2561b1d86079dca4b71fde7f235e2c2d3d7aa0f1c74e7306596b3f175d8c8efabec
SHA5127876b856c4609ce2800e6ab1694623b34b3bdb8765d5cfee3e40e67c9684e3c040db695b49403191e37b16780a35667beef03601d36e5a25deb0d6e34dc76734
-
Filesize
6KB
MD529212bea6262285465572f5e84409395
SHA19604f5a98e5c127b1ca9314d1a2c7a1951ea68b0
SHA2564f9fe41a609490e886db5a43829a6d10cee29d3dda1cda37c204a06468e95dc5
SHA512d9bc8325dc6efeb2a711f54187de21544b6ae4f1b0cde37fbb85a2117aa0f58044a0757cdf4d2af084c8a9d533a7ec762e9888a2cb97778658418a175845be66
