Analysis
-
max time kernel
21s -
max time network
127s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
08-12-2024 13:25
Behavioral task
behavioral1
Sample
d744723ff284094a006bad426ed3d6c6_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
d744723ff284094a006bad426ed3d6c6_JaffaCakes118.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral3
Sample
d744723ff284094a006bad426ed3d6c6_JaffaCakes118.apk
Resource
android-x64-arm64-20240910-en
General
-
Target
d744723ff284094a006bad426ed3d6c6_JaffaCakes118.apk
-
Size
8.0MB
-
MD5
d744723ff284094a006bad426ed3d6c6
-
SHA1
3b5e07a9ee4b561f86c1d9f957e2d883e1833a74
-
SHA256
abfc681699486b55ab723a174ab25404124334133bb5d3c94fdbd39a3af9c9a3
-
SHA512
d44d33c608344ab8743af82d216211f6eebb1a6742d6e0656670ab6e7646a3c2695f4e3774afbc65d01018dd0deae50e39160e0ddbaed6d72f652142bb11553a
-
SSDEEP
98304:scZSMu2goodfQYUv4O/VkY1G2WtCqJTBQN8pvaTJ3apDRY:slT/dbUAYG2W4qpM8pvaTJCY
Malware Config
Signatures
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone net.dinglisch.android.taskerm -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver net.dinglisch.android.taskerm -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal net.dinglisch.android.taskerm -
Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo net.dinglisch.android.taskerm -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo net.dinglisch.android.taskerm