Analysis
-
max time kernel
33s -
max time network
137s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
10-10-2024 17:19
General
-
Target
310c33934ef4cedc302a7532e26ae75b_JaffaCakes118.apk
-
Size
643KB
-
MD5
310c33934ef4cedc302a7532e26ae75b
-
SHA1
e1544293f6b4e6c7b18bd7ccf5c6a4134ca5ac50
-
SHA256
59c2f0a9227ad1a61f520ec9a5135ea117782382e42ff5fc8007086a9a73dd21
-
SHA512
fba8ba28e3ec841c552ed5fce9d16b6ecc046008043912dfbee9001952ab179ecb9be5c22bcd3eb0d96c8fa222a602efff520ff0e279b0a3da37ae346ce5c64d
-
SSDEEP
12288:oP719AaUqxMYvy31vXIGVlJpitWX+xG2L9x9kFFukQuMYEyWI7XL:AYuApXIG3JpDXWL9xKFPMYEzG
Score
7/10
Malware Config
Signatures
-
Queries account information for other applications stored on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect account information stored on the device.
-
Queries the phone number (MSISDN for GSM devices) 1 TTPs
-
Queries information about active data network 1 TTPs 1 IoCs
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Reads information about phone network operator. 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
vn.adflex.process1⤵
- Queries account information for other applications stored on the device
- Queries information about active data network
-
com.vns.doctruyen1⤵
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information