Analysis
-
max time kernel
123s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
03/11/2024, 18:47
Static task
static1
Behavioral task
behavioral1
Sample
8cf5b5457879832547aaa9601b133157_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
8cf5b5457879832547aaa9601b133157_JaffaCakes118.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
8cf5b5457879832547aaa9601b133157_JaffaCakes118.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
8cf5b5457879832547aaa9601b133157_JaffaCakes118.apk
-
Size
350KB
-
MD5
8cf5b5457879832547aaa9601b133157
-
SHA1
53cf2e85bfb1731d1ea256114c1edbb444685263
-
SHA256
240b3a08e69d5fc6f9cd3fac58fe7ab0ee822c1dabd4ef205b77d3405f2576d8
-
SHA512
5c08f0e84aac7ca9e1e803df29bd31b9b9458acc782ae17929665df1b059270acd6c28ed1246e0fc14510e816a4391dd050d4410c3fe3502d0b9a64c83d9acbc
-
SSDEEP
6144:3kBZ2zPIe0t4VfF8b/Tp/ezO0BaJmRbGMLwtjW1mRbGMLwtjW2mRbGMLwtjWgmRE:3UZ9eDQ38CmsMs41msMs42msMs4gmsMO
Malware Config
Signatures
-
Queries the phone number (MSISDN for GSM devices) 1 TTPs
-
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo ngjvnpslnp.iplhmk -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone ngjvnpslnp.iplhmk -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver ngjvnpslnp.iplhmk -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal ngjvnpslnp.iplhmk -
Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo ngjvnpslnp.iplhmk -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo ngjvnpslnp.iplhmk
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
18B
MD54e0b88cc6c011977206b91d1170d0d86
SHA17c1fe55b144c23d588ee393bb9a64a5f632cc648
SHA2560d2103c21aa02c206bba61f07d8b1109899f84fa5bbde3c5c0bd6a0142d15df0
SHA512ef7d49a623be7a49c168d3388a9d1af845bc37531bff616452ccc71dad75b936b9973a93dafa8c83df1d95439b3bbdb10f7ff2b92cc9dbeb258ab1d206424534
-
Filesize
34B
MD5433b2bf332a3d946156a8f75adfc7f1a
SHA169d5bcbe5fcdfec71a8afe5ab082182753f65139
SHA25686cf7fb0d02bdda3911f906ba3587276fda66abc7543d9636af1b71a3ca28b78
SHA51289c571c0126df71c62399fa2b30a4ba4a71ab3f6066270549a23492cd03dafd8135e245d1df2989cfef051cd3cf77d261cd27848b6a4bf9491eda1713966563a