Analysis
- max time kernel
156s - max time network
142s - platform
android_x64 - resource
android-x64-arm64-20240506-en - resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240506-enlocale:en-usos:android-11-x64system - submitted
08/05/2024, 04:39
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
233b361a1ecd134c8900d4bdc943032f_JaffaCakes118.apk
Resource
android-x86-arm-20240506-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
233b361a1ecd134c8900d4bdc943032f_JaffaCakes118.apk
Resource
android-x64-20240506-en
4 signatures
150 seconds
General
- Target 233b361a1ecd134c8900d4bdc943032f_JaffaCakes118.apk
- Size 213KB
- Sample240508-e91czadg82
- SHA256 76bf7d98850881015cc4bd3e6e686e0fbbc172695e512db20b91fadb9ef97ee4
- MD5 233b361a1ecd134c8900d4bdc943032f
- SHA1 8a8632a26416d0c3f68c91ef547014ff648cb808
- SHA512 02a4ec76e39f06c7dfec25a27528babc591a3aad2eb8c75a456e614266238511f41314a97339b6c2880d01b8b92a90f3f229401aaec96acdd7576ffb3373397c
- SSDEEP 6144:fIb/0szi6yig4a8dHtVIFXhYoBKSTrfI/+NE3M+u:wz0K99xa8dHb0XioBlTrf0F3Mx
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
pid Process 4754 com.cold.toothbrush - Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground com.cold.toothbrush - Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.cold.toothbrush - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.cold.toothbrush
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/com.cold.toothbrush/files/6e85b089-9f52-4a28-969e-70f77585f8bb.dat
- Size 464B
- SHA256 2d370fd6516f0a4753334ccd8639005137a360a5c7ee5cb33d0504d054ebe23b
- MD5 55234bcf86e4ca15cb3c9f9faac4f5d0
- SHA1 3ca9d7410e57a60284bf6b443a00ce53a2caf4c9
- SHA512 9c9f9a4a45ce5d854d448de435a274ed4bb033b082952f1f0f2b984a21b8243d08ac49a3f7314e900f66555e3e8a9b42e3a3863e52f274532cc50b0b93fd02df
- MD5 SHA1 SHA512