2fd5eddd65b8c35272cde79643ce07f2ca4449766943e8a4b478d620708c9662 | Triage

Analysis

max time kernel
137s
max time network
143s
platform
android_x64
resource
android-x64-arm64-20240506-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240506-enlocale:en-usos:android-11-x64system
submitted
08/05/2024, 12:12

Sharing

Report Analysis Logs

General

Target

24c856bdc19e79cc96548e8fa99413f1_JaffaCakes118.apk
Size

14.7MB
MD5

24c856bdc19e79cc96548e8fa99413f1
SHA1

e7d3e2c919d29ce40c77a30e0813c8093bb1dcd2
SHA256

2fd5eddd65b8c35272cde79643ce07f2ca4449766943e8a4b478d620708c9662
SHA512

3cc4c50b33e8a9d7fb0dcf7fca89a69d3fda59fc7ebda888f9797eca69c488a0315bb18e6d0c8a2f349bf771438f5cd6efdd730b23b24ff468db83cbf1154336
SSDEEP

393216:rQtBWduQtBWd4QtBWdxQtBWdxQtBWdvQtBWdC:0+P+t+o+c+y+4

Score

7^/10

collection credential_access discovery evasion impact

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/cpuinfo	com.zu.zu

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/meminfo	com.zu.zu

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

Transmitted Data Manipulation

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.zu.zu

com.zu.zu
1⤵
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
PID:4813

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Clipboard Data

Discovery

System Information Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Manipulation

Transmitted Data Manipulation

Replay Monitor

Loading Replay Monitor...

Downloads