Analysis
-
max time kernel
12s -
max time network
130s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
26/11/2024, 11:44
General
-
Target
a1bb31b6b6ef8f381a378475dd303b87_JaffaCakes118.apk
-
Size
1.5MB
-
MD5
a1bb31b6b6ef8f381a378475dd303b87
-
SHA1
994d14851a8dd00ea912cf84dd7bdd875d7b95a1
-
SHA256
99c231e24f06f3d8517dcc3bca2d91ec92caaf2d155a52e20b4110b6f0022408
-
SHA512
bceac10cd1c1506e866ec176f8861bf86d1313cbda93194bfcdea5bd3ca3aac78d621f217e85edda18381f68138643de7dcd114ad488914d8ac75b07a5b019b5
-
SSDEEP
24576:dukVExX4rkOSVqG7KBNicW29CoVViNEsbkb7aZKZQNXORemW3hEhUukfrQF0p5d0:dLVERgkSG7EW2riisa73ZQ0zWKMrQgr0
Malware Config
Extracted
truthspy
http://protocol-a79.thetruthspy.com/protocols
Signatures
-
Truthspy
Truthspy is an Android stalkerware.
-
Truthspy family
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes
-
com.systemservice1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
26KB
MD59c45b23a93be7dc2e2179931cf8ff5cc
SHA15ba1f16802c041e85faa0196e30b70a5da7c9616
SHA256bfbe842056582a3d3f8c3cc3bbcb0f9f91554be050a02084e58c721b25206d9c
SHA512ebc900671b13983d33e258c6306d3413e1880d1aebb595885ac2872a5ea39e64c960bf41760ac3d18c228ee281612385d5fbd3191dc4d97f0510eb90f2d6a6ac