7c946e4e42ef52dba324a309df1d924ca1f88d5cfe056c26c4fe59a7eaefa1bb

Analysis

max time kernel
4s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
10-10-2024 15:28

Target

3096bac11353e78e331c55f5940b29e7_JaffaCakes118.apk
Size

4.4MB
MD5

3096bac11353e78e331c55f5940b29e7
SHA1

61ad2ed3832c3cc4d103a3713d6ff485c5032bd1
SHA256

7c946e4e42ef52dba324a309df1d924ca1f88d5cfe056c26c4fe59a7eaefa1bb
SHA512

5b4713a4d2a563afb292338e6f0552aff1c99e47bc075bffb8b8ecce105577145c802abcae5dc2f62dcbac023002b4816893fb9d568bacf41f0b783bc59582be
SSDEEP

98304:8VgWX3zXGR5D98uPdbtcwGZ6QhM4f+2HBw3GR5D2:8VZ3K3LbQ7M4pHBR3i

Score

7^/10

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Queries information about active data network 1 TTPs 1 IoCs

System Network Connections Discovery

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	cn.com.KGJZ.livewallpaper.mingche

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

System Network Configuration Discovery

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	cn.com.KGJZ.livewallpaper.mingche

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

Broadcast Receivers

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	cn.com.KGJZ.livewallpaper.mingche

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Data Encrypted for Impact

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	cn.com.KGJZ.livewallpaper.mingche

Checks CPU information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/cpuinfo	cn.com.KGJZ.livewallpaper.mingche

Checks memory information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/meminfo	cn.com.KGJZ.livewallpaper.mingche

cn.com.KGJZ.livewallpaper.mingche
1⤵
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4208
- logcat -d -v raw -s AndroidRuntime:E -p cn.com.KGJZ.livewallpaper.mingche
  2⤵
  PID:4342
- logcat -c
  2⤵
  PID:4374