Analysis
- max time kernel
150s - max time network
144s - platform
android_x64 - resource
android-x64-20240506-en - resource tags
androidarch:x64arch:x86image:android-x64-20240506-enlocale:en-usos:android-10-x64system - submitted
08/05/2024, 04:39
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
233b361a1ecd134c8900d4bdc943032f_JaffaCakes118.apk
Resource
android-x86-arm-20240506-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
233b361a1ecd134c8900d4bdc943032f_JaffaCakes118.apk
Resource
android-x64-20240506-en
4 signatures
150 seconds
General
- Target 233b361a1ecd134c8900d4bdc943032f_JaffaCakes118.apk
- Size 213KB
- Sample240508-e91czadg82
- SHA256 76bf7d98850881015cc4bd3e6e686e0fbbc172695e512db20b91fadb9ef97ee4
- MD5 233b361a1ecd134c8900d4bdc943032f
- SHA1 8a8632a26416d0c3f68c91ef547014ff648cb808
- SHA512 02a4ec76e39f06c7dfec25a27528babc591a3aad2eb8c75a456e614266238511f41314a97339b6c2880d01b8b92a90f3f229401aaec96acdd7576ffb3373397c
- SSDEEP 6144:fIb/0szi6yig4a8dHtVIFXhYoBKSTrfI/+NE3M+u:wz0K99xa8dHb0XioBlTrf0F3Mx
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
pid Process 5079 com.cold.toothbrush - Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground com.cold.toothbrush - Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.cold.toothbrush - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.cold.toothbrush
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.cold.toothbrush/files/6e85b089-9f52-4a28-969e-70f77585f8bb.dat
- Size 464B
- SHA256 aadbf580d91624d26552575db8d8cd4fc0a8328240a86186fa1744f45c2bfd38
- MD5 0bb2b33618e9b38fcca249ab671c0efa
- SHA1 1fcce6f30ba8246f043f08ca5687e3afa99788a6
- SHA512 b3978bf3c30128449f81d098f526cb3adb4ba2f35e0647fca0f141afb115f5907eb9ff8b04ea27b923ff82a5fd43548b2c95a9643c05ffe310d4a83fafd0ded7
- MD5 SHA1 SHA512