Analysis
- max time kernel
150s - max time network
131s - platform
android_x86 - resource
android-x86-arm-20240506-en - resource tags
androidarch:armarch:x86image:android-x86-arm-20240506-enlocale:en-usos:android-9-x86system - submitted
08/05/2024, 04:39
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
233b361a1ecd134c8900d4bdc943032f_JaffaCakes118.apk
Resource
android-x86-arm-20240506-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
233b361a1ecd134c8900d4bdc943032f_JaffaCakes118.apk
Resource
android-x64-20240506-en
4 signatures
150 seconds
General
- Target 233b361a1ecd134c8900d4bdc943032f_JaffaCakes118.apk
- Size 213KB
- Sample240508-e91czadg82
- SHA256 76bf7d98850881015cc4bd3e6e686e0fbbc172695e512db20b91fadb9ef97ee4
- MD5 233b361a1ecd134c8900d4bdc943032f
- SHA1 8a8632a26416d0c3f68c91ef547014ff648cb808
- SHA512 02a4ec76e39f06c7dfec25a27528babc591a3aad2eb8c75a456e614266238511f41314a97339b6c2880d01b8b92a90f3f229401aaec96acdd7576ffb3373397c
- SSDEEP 6144:fIb/0szi6yig4a8dHtVIFXhYoBKSTrfI/+NE3M+u:wz0K99xa8dHb0XioBlTrf0F3Mx
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
pid Process 4465 com.cold.toothbrush - Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground com.cold.toothbrush - Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.cold.toothbrush - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.cold.toothbrush
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.cold.toothbrush/files/6e85b089-9f52-4a28-969e-70f77585f8bb.dat
- Size 464B
- SHA256 e67d10d9c73a5000395713b96f0dc7ba3f7a5ec03ce9ce0133170c23235e0aab
- MD5 b6dcbc9cf8a2fbc4f6a3b9a4ae160ddb
- SHA1 1c93212bbf1efc3a354b416d705c1f14f83b8562
- SHA512 8f16acebe9c850a2d14afb7f94fa115e42e51c36ad5a8f5901a857bec8453a531a39208e124516073376aa6abcd11854bf357c9d5a9c248b50438e9b82a5ffad
- MD5 SHA1 SHA512