Analysis
- max time kernel
149s - max time network
156s - platform
android_x64 - resource
android-x64-20240624-en - resource tags
androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system - submitted
16/10/2024, 19:56
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
4ebb4e668fe6ed19ab39b38465f44312_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
4ebb4e668fe6ed19ab39b38465f44312_JaffaCakes118.apk
Resource
android-x64-20240624-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
4ebb4e668fe6ed19ab39b38465f44312_JaffaCakes118.apk
Resource
android-x64-arm64-20240624-en
6 signatures
150 seconds
General
- Target 4ebb4e668fe6ed19ab39b38465f44312_JaffaCakes118.apk
- Size 2.0MB
- Sample241016-yn56watapp
- SHA256 728f09da3cf0dc9cb04ad949aecd65d2a2d8358bc1727743af929f7cabe86f6e
- MD5 4ebb4e668fe6ed19ab39b38465f44312
- SHA1 67228b59b4cffb2a7ff444aca0ab3acc0c30e27c
- SHA512 868b56ea6ce4e7ca3b8c4d6fbb9048cc1c1141a42c15b39a58d48ba7b6c6f6b361357ecc07b687b4979dcb7d11e14b7e831d478ccd62e0b6164b30cd6d3e3d16
- SSDEEP 49152:gkCdymkaK2E6uXU6hTDWGSWx4vOvlTMxV+JR:tj157XUMS44vONX
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Malware Config
Signatures
-
pid Process 4972 com.zhdfkohn.hgiruy - Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.zhdfkohn.hgiruy/app_xdgwkq/ajhxnerehf.jar 4972 com.zhdfkohn.hgiruy - Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.zhdfkohn.hgiruy - Queries the phone number (MSISDN for GSM devices) 1 TTPs
- Reads the content of SMS inbox messages. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://sms/inbox com.zhdfkohn.hgiruy - Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.zhdfkohn.hgiruy/app_xdgwkq/ajhxnerehf.jar
- Size 765KB
- SHA256 04c3ba91ea7bdc41704accfdb53883a0b20b402d09f1a1e47909ca36452fcf9a
- MD5 9aff985bd58021620f1e8fa81e8ee439
- SHA1 b59b6648842e467ccfa834b34200d91dc42badf7
- SHA512 193d662cd332f83513743d229ade75a19bdd3f4e15bea4def98f5f22774c22eb3095edf56f139c3b8205614326607d8b29137a2045f214dc1e63348f6d4f039f
- SSDEEP 12288:XebfMzFHczTKwJKvxcu1WxcvnzjZwBHF9KEDZvUVRg3NnaQHme7pMuZxju3DlM:+fMR8jKva8vzOP9KoiV0NFjMuZJ2Du
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.zhdfkohn.hgiruy/app_xdgwkq/ajhxnerehf.jar
- Size 1.8MB
- SHA256 c010bf1ee992f3beb04998f1804a53a4a94b353039dacab936cfe2e09f3274ed
- MD5 4fae462233d6c669868104a3af68c50d
- SHA1 b0e25601573244ee16c593e8236fce98fcb71f46
- SHA512 033b3c2c67ba4a86aab59848a4d4686c10d002a6d5bd804e7802c0756c43caa85d58007f322c390d83ee5dcaf14ff2110036f5bf072528e5e9515ac1e93e8675
- SSDEEP 24576:AoSoxf6ysXRAbaaseYlDpjuiQJPrz2fuY1fm0td9pHxFA6WM4171tYvSxPn:A9hBuSGYs0tPpHxq6T417z3
- MD5 SHA1 SHA512 SSDEEP