Analysis
-
max time kernel
149s -
max time network
132s -
platform
android_x64 -
resource
android-x64-arm64-20240624-en -
resource tags
-
submitted
02-10-2024 08:06
General
-
Target
09b0b89f5afba38a52f627894e1caa5c_JaffaCakes118.apk
-
Size
479KB
-
MD5
09b0b89f5afba38a52f627894e1caa5c
-
SHA1
ac03bb8b067bc4a2f369217fa2094e3ca7e99d8d
-
SHA256
d71d7680ad9e75f3f65e52ae47ce9f646eb77108f5dca5b5ecb9281be07f18f8
-
SHA512
bf2d17dcb61faab33e4f8e1b638a5796b4289391acef1a7c207839f227d50aacf011d1095f6dceab32b1e7620f5f85a898266470240823d9a0cb73c1c918dae7
-
SSDEEP
12288:QsDX4Sg7aRM9tcRRZZ5c09xP7ufmh607YjCGOJDXzsYAqsu:V4SkaRqcjDy09FYApNGRu
Score
8/10
Malware Config
Signatures
-
Removes its main activity from the application launcher 1 TTPs 1 IoCs
-
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries the phone number (MSISDN for GSM devices) 1 TTPs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network 1 TTPs 1 IoCs
-
Reads information about phone network operator. 1 TTPs
Processes
-
com.android.market1⤵
- Removes its main activity from the application launcher
- Queries information about running processes on the device
- Makes use of the framework's foreground persistence service
- Queries information about active data network