Analysis
-
max time kernel
63s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
23-10-2024 17:09
Static task
static1
Behavioral task
behavioral1
Sample
6ffab6be85b284e1aab6cf754a323f09_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
6ffab6be85b284e1aab6cf754a323f09_JaffaCakes118.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
6ffab6be85b284e1aab6cf754a323f09_JaffaCakes118.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
6ffab6be85b284e1aab6cf754a323f09_JaffaCakes118.apk
-
Size
705KB
-
MD5
6ffab6be85b284e1aab6cf754a323f09
-
SHA1
a2085c627c5b4c10ba2a43a9f35bcdc900e689bc
-
SHA256
9d9c3616f22e80eceff6a8cc81d29d25f0b232dbb6f1e275736003006ad4618a
-
SHA512
8206ceafda35e85dc48cfa5c573f73b439754d6ba0a82bb73e45ab9b3cbb1bfd7c338ae39e58393b9ae44b8d22af8c85872f673252e0a3b92f93b9e1530f5a89
-
SSDEEP
12288:ohSjTmqswYuFwKbHB/ff4wRhnvGHkpANWEx4AJMfB6Gv3HAIGt3EO4QJGMF873MP:1jZ/YuxQ0FgkpADmzB6EQIGJENJ8P
Malware Config
Signatures
-
Acquires the wake lock 1 IoCs
Processes:
mobi.nmntnqn.lnkoknlnmnkdescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock mobi.nmntnqn.lnkoknlnmnk -
Queries information about active data network 1 TTPs 1 IoCs
Processes:
mobi.nmntnqn.lnkoknlnmnkdescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo mobi.nmntnqn.lnkoknlnmnk -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
mobi.nmntnqn.lnkoknlnmnkdescription ioc process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone mobi.nmntnqn.lnkoknlnmnk -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes:
mobi.nmntnqn.lnkoknlnmnkdescription ioc process Framework service call android.app.IActivityManager.registerReceiver mobi.nmntnqn.lnkoknlnmnk -
Checks memory information 2 TTPs 1 IoCs
Processes:
mobi.nmntnqn.lnkoknlnmnkdescription ioc process File opened for read /proc/meminfo mobi.nmntnqn.lnkoknlnmnk