Analysis
-
max time kernel
47s -
max time network
155s -
platform
android_x64 -
resource
android-x64-20240221-en -
resource tags
-
submitted
20/04/2024, 23:13
General
-
Target
fddf751ee05eb16e7141e2da5d90c01b_JaffaCakes118.apk
-
Size
180KB
-
MD5
fddf751ee05eb16e7141e2da5d90c01b
-
SHA1
6018458b62790d09cef0854bd276f974018d51cd
-
SHA256
502573f4b15f83a6575545747a95e0814cb6dd18b1d34e5cb8b4861f6c92ac5b
-
SHA512
9c327eb1fabb4a721346604a9b55ba6b119219c268c62ebf34809c8f2df41e851d67da877b4b454103f2cd2fdb52c05a28a945ae1da77ded5d44e10f50045ddd
-
SSDEEP
3072:2w6Ex2YHr6bQAtRWf3a/tlNLTXwCxk5rEk3g5b8uFDyoL2WF7jMAAC3OZeq2:2w8bQGAPa/tlNLLN0Ak3qbLFDyo6WFys
Score
7/10
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes
-
com.goyal.website2apk1⤵
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)