Overview
overview
8Static
static
6893a1f4867...18.apk
android-9-x86
8893a1f4867...18.apk
android-11-x64
7com.skymob...13.apk
android-9-x86
1com.skymob...13.apk
android-10-x64
1com.skymob...13.apk
android-11-x64
1com.skymob...09.apk
android-9-x86
1com.skymob...09.apk
android-10-x64
1com.skymob...09.apk
android-11-x64
1com.skymob...33.apk
android-9-x86
com.skymob...33.apk
android-10-x64
com.skymob...33.apk
android-11-x64
skymobi_pa...in.apk
android-9-x86
4skymobi_pa...in.apk
android-10-x64
4skymobi_pa...in.apk
android-11-x64
1unicom_resource.apk
android-9-x86
1unicom_resource.apk
android-10-x64
1unicom_resource.apk
android-11-x64
1Analysis
-
max time kernel
5s -
max time network
160s -
platform
android_x64 -
resource
android-x64-arm64-20240624-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system -
submitted
03/11/2024, 02:36
Static task
static1
Behavioral task
behavioral1
Sample
893a1f486715b1052900e52cad0747f9_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
893a1f486715b1052900e52cad0747f9_JaffaCakes118.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral3
Sample
com.skymobi.pay.plugin.main_v10013.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral4
Sample
com.skymobi.pay.plugin.main_v10013.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral5
Sample
com.skymobi.pay.plugin.main_v10013.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral6
Sample
com.skymobi.pay.plugin.recordupload_v10009.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral7
Sample
com.skymobi.pay.plugin.recordupload_v10009.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral8
Sample
com.skymobi.pay.plugin.recordupload_v10009.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral9
Sample
com.skymobi.pay.plugin.smspay_v10033.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral10
Sample
com.skymobi.pay.plugin.smspay_v10033.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral11
Sample
com.skymobi.pay.plugin.smspay_v10033.apk
Resource
android-x64-arm64-20240910-en
Behavioral task
behavioral12
Sample
skymobi_pay_wxplugin.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral13
Sample
skymobi_pay_wxplugin.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral14
Sample
skymobi_pay_wxplugin.apk
Resource
android-x64-arm64-20240910-en
Behavioral task
behavioral15
Sample
unicom_resource.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral16
Sample
unicom_resource.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral17
Sample
unicom_resource.apk
Resource
android-x64-arm64-20240910-en
General
-
Target
893a1f486715b1052900e52cad0747f9_JaffaCakes118.apk
-
Size
3.4MB
-
MD5
893a1f486715b1052900e52cad0747f9
-
SHA1
d288b802292628a3b0d2572f0178c4eab723515e
-
SHA256
e8021f5725bc0cd7cebf4d771c4e6c5af37bbefa2b3dd623f20fa9e172753e58
-
SHA512
0cd2f470e36f24cfb95d81be752d5e38e22f6bd41f95f1fe8442c19e5a51190e78caf051c4ed9a3577857badb8bf1117a1d2ed31e158fd8f90dc3d9ef944474d
-
SSDEEP
98304:eibGOeNUyD+b9a4063RwGTUgpM7TeT0Czh6Ru2ijtkKjGrI4hjf6g6:XYNdDD8KGT8OT0CBfIhjfg
Malware Config
Signatures
-
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.ijiehun.tcmn.zimon -
Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
description ioc Process Framework service call android.net.wifi.IWifiManager.getScanResults com.ijiehun.tcmn.zimon -
Reads the content of SMS inbox messages. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://sms/inbox com.ijiehun.tcmn.zimon -
Requests cell location 2 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.ijiehun.tcmn.zimon -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.ijiehun.tcmn.zimon -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.ijiehun.tcmn.zimon -
Reads information about phone network operator. 1 TTPs
Processes
-
com.ijiehun.tcmn.zimon1⤵
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Reads the content of SMS inbox messages.
- Requests cell location
- Queries information about active data network
- Queries information about the current Wi-Fi connection
PID:4502
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2KB
MD564d23dcfe2728a536a86be8824a18de6
SHA12202aaaae03fb63ffddb2021735b209e8a295f92
SHA256c16e7fa6efb803e6a1b5f77f494e16ca94301886a81d5af364b3e28daf041b70
SHA51232a7d28a4f3fdaa332dcd2d9933cc8d9730b26c0764da5de3bd6239694b648ba5d6e7d73f424f7655e9eede38418495240249d8a1961ddf00f57a4a3a0662344