Analysis
- max time kernel
126s - max time network
156s - platform
android_x64 - resource
android-x64-20240624-en - resource tags
androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system - submitted
20/10/2024, 02:45
Static task
static1
Behavioral task
behavioral1
Sample
5ffaf7f16d4f070206848c1e1bb9e255_JaffaCakes118.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral2
Sample
5ffaf7f16d4f070206848c1e1bb9e255_JaffaCakes118.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
5ffaf7f16d4f070206848c1e1bb9e255_JaffaCakes118.apk
Resource
android-x64-arm64-20240910-en
Behavioral task
behavioral4
Sample
qqphonebook.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral5
Sample
qqpimsecure.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral6
Sample
youni.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral7
Sample
youni.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral8
Sample
youni.apk
Resource
android-x64-arm64-20240624-en
General
- Target 5ffaf7f16d4f070206848c1e1bb9e255_JaffaCakes118.apk
- Size 9.1MB
- Sample241020-c87pjsvbjd
- SHA256 b4e8b5aa7c3afee74220f66a26387e463d4a5692f30d06035af203dc482511e0
- MD5 5ffaf7f16d4f070206848c1e1bb9e255
- SHA1 78540749304afd037b6908edd7c8aa7f01075a45
- SHA512 b796ab4e163e81bab80f96fe7961bd879fcd4c78bb2798df02d842dd8744efadf48c2582274fda1ac848aad9509411c4a51970fd4845c59a86b852fe0c2aab45
- SSDEEP 196608:rr4rbF6rqRAiK5Lcu98WJ0JkdUV43ub1Ckw5nGnSpMgMAEljiTrmf:nsUAAiK5LEK0BV+uckwEniQ/lOnmf
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.androidbox.g31zhyxcn2y - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.androidbox.g31zhyxcn2y - Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.androidbox.g31zhyxcn2y - Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.androidbox.g31zhyxcn2y - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.androidbox.g31zhyxcn2y
Processes
-
com.androidbox.g31zhyxcn2y1⤵
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
PID:4995
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.androidbox.g31zhyxcn2y/files/activation.dat
- Size 1B
- SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
- MD5 93b885adfe0da089cdf634904fd59f71
- SHA1 5ba93c9db0cff93f52b521d7420e43f6eda2784f
- SHA512 b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee
- MD5 SHA1 SHA512
- Path /data/data/com.androidbox.g31zhyxcn2y/files/mobclick_agent_cached_com.androidbox.g31zhyxcn2y
- Size 107B
- SHA256 e9e01a49cb161cd7a551b830f80ad958d81bd7808978cfd23d779e5f38b84087
- MD5 394128b2267aa6718b8cb8a247fff044
- SHA1 40a1ed4fb07a408dbe8d9c6e8eacec44ae25cc44
- SHA512 ad4a0951b330e30260466016f8970e5631e9e65823a8f6a6992db2bedaafe19ed9ec54e60d20e398ddecfcde789b44094bad70ade1769a51c52244b37afb4e40
- MD5 SHA1 SHA512
- Path /data/data/com.androidbox.g31zhyxcn2y/files/mobclick_agent_cached_com.androidbox.g31zhyxcn2y
- Size 211B
- SHA256 ce97aa0bb3d9a8a6e7bb3bc8f9fb61599406b534c1c078f04f34cfb6481c1920
- MD5 4c75ab769b3730f69202053dcdc57882
- SHA1 bc362ce803dd3aeb6855a9eddb2c0abf79af333b
- SHA512 e41413062ee980ba7a070de300ae9654edf242d6036e30470fc9c0faadc5998ecc3c5e4f5da3a6ad01f2735b9f12a488b2dd7378c193872f2ec16fd1750931b1
- MD5 SHA1 SHA512
- Path /data/data/com.androidbox.g31zhyxcn2y/files/temp1536.mid
- Size 1KB
- SHA256 a4411f0b0e332a1dead58cf211808df6f2c57f8f0d9ec9ed25d616bd1fd763a4
- MD5 7ecc40569500c8c763604f1ed6e8e7ec
- SHA1 c9d3c677e05bfc352eee98ae4505b8e96fb44ce8
- SHA512 fd81930f8d45344040cf0c3743cfbb44edba89e9eee815db21071ba8a442a42015bf41065466006d39d9fd40839a4cd286f696b5c3f6106f9ddcdfc4fef90b32
- MD5 SHA1 SHA512
- Path /data/data/com.androidbox.g31zhyxcn2y/files/temp2364.mid
- Size 2KB
- SHA256 d8936a0b5476181a63b6b20467d33b150e1b16a02f2e46b327db5bdf271b154f
- MD5 1ccd7296ce3fb092efd01f7d271dddf3
- SHA1 da9abd49331d86d4ebd369ebb2c3694f3c168ff8
- SHA512 e9b4f19ed77c0c448a25c758d3812e0d09c2c37a38eb979d9f5786f2d2db1f601452c4df98432e7c74ef72c0f3e51444e2441252e352b8ff9a9f82dec2d5aa13
- MD5 SHA1 SHA512