3d0be5f3994e404f2d742fe2475fc578626f2d8beb167b56324d9736f3be4a20

General

Target

2efa67a42b8846396b10f6acd7a7040b_JaffaCakes118.apk
Size

7.0MB
MD5

2efa67a42b8846396b10f6acd7a7040b
SHA1

ce591e9640233a38295e5b852159e28b2a9cb2d8
SHA256

3d0be5f3994e404f2d742fe2475fc578626f2d8beb167b56324d9736f3be4a20
SHA512

c9caf4812b06c9a3d9f59c7b16cff50dfb06abe326796ce45d6067776afbf1c2e3081b641fd804c45d2000e92f9513567d058c197fa04012fcf599e6c54166c4
SSDEEP

196608:pZyEk9Kb59qlA08SYjY60KfdYJ2+wptSAP1T0:bXkcdclA08SD60Sdft7Ph0

Score

7^/10

collection credential_access discovery evasion impact

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.igoldtech.an.swipedfruits

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.igoldtech.an.swipedfruits

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.igoldtech.an.swipedfruits/cache/ads3560553535589181785.jar	4887	com.igoldtech.an.swipedfruits

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.igoldtech.an.swipedfruits

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.igoldtech.an.swipedfruits

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.igoldtech.an.swipedfruits

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.igoldtech.an.swipedfruits

com.igoldtech.an.swipedfruits
1⤵
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries information about the current Wi-Fi connection
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4887

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

1

T1407

Virtualization/Sandbox Evasion

2

T1633

System Checks

2

T1633.001

Credential Access

Clipboard Data

1

T1414

Discovery

System Information Discovery

2

T1426

System Network Connections Discovery

2

T1421

Lateral Movement

Collection

Clipboard Data

1

T1414

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

1

T1471

Data Manipulation

1

T1641

Transmitted Data Manipulation

1

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.igoldtech.an.swipedfruits/cache/ads3560553535589181785.jar

Filesize
2KB

MD5
d80f6d032778b02d10a9c9a2f1a24714

SHA1
e34d4ea9618b1b499b65032723ea029ab3998500

SHA256
ee2de01a238f9e1834f9f9934dd1f5b267bdf9747965641d2fd636d740041f9b

SHA512
34fa52d41831142f86999ac407aafeb2b69bb4cd45ada9f739be84c80deb0414d11d6784f385eec287e4f6b5bdf29ba1c9a6a77c07707d66a73c60eb389136e1

Download Submit
/data/user/0/com.igoldtech.an.swipedfruits/cache/ads3560553535589181785.jar

Filesize
4KB

MD5
12670a32ad1380c9021a9e74aa5f2281

SHA1
7e8caf0c7a4d78452efb90958e8ce1aae5148e44

SHA256
f3c142f78cadcb57d7da3d8e4dc5f8c7b05377417c639059910696c844afc1f9

SHA512
1277dde373cab02d5df62732834adb79f8dbf1d1a9ac56b5b348e354317fadc24fe20b5ebdd1ecc28f8fc98dcdff807d2839bef75ef7d871e976e68a95851b06

Download Submit
/data/user/0/com.igoldtech.an.swipedfruits/databases/http_auth.db

Filesize
20KB

MD5
ed710a8968441282a5939621c2771927

SHA1
b6ac28b3e32ea66790c52d6934608b5e71f3d5b8

SHA256
6e7b95a553c2528d6c564296a9e481a6d913074c35011a19f2da8e4807c53bb2

SHA512
547d7c530ad345edf6b880b7685d2ddf3770e595fe3a40041677cb0c296b15ec6d9e8ebf3f2db51624be41766a0af6764512f1c352d5fde22bdea81d7c08e364

Download Submit
/data/user/0/com.igoldtech.an.swipedfruits/databases/http_auth.db-journal

Filesize
512B

MD5
ac135db98509bdb083c45fed3d5629e5

SHA1
216c9ea60481bdaa218828d750a9a9521c6e73df

SHA256
03613ca5a652c6540d40e6a03a28510e2c62282338419bfbc7d08cc03d049baa

SHA512
77d00d9753c1009d409c721fc1b7ce69a0fb3edcc1eb3b280938233d16a9216d3afe28fcfb8fbbd3bda765f95974a5e19237a29e7a10d9353ef2e15e58d820a3

Download Submit
/data/user/0/com.igoldtech.an.swipedfruits/databases/http_auth.db-journal

Filesize
8KB

MD5
ba6537ac0fdeab77d3f53becfff3d1dc

SHA1
316b592c0c4e213ec7e457bf1dbc05986ad4334d

SHA256
8c2feed1492635cdb86bc18521a2462fcfd80f9a57e6ca42bff841fc36b54bb0

SHA512
b80a54c4da3986bfa65d837048882c5f00e2d1a34beb755dca0cdfeb06815bfaacbbca408624642382b18728917c17f1ea2a48776a3d62894986aa5781619d94

Download Submit
/data/user/0/com.igoldtech.an.swipedfruits/databases/http_auth.db-journal

Filesize
8KB

MD5
260e9f0f0fcb592d328a5c62fd457a1c

SHA1
2e5d8ee1b313a36b9c744d3cf8d8c636ab4623e1

SHA256
b78d09e524075e778ab32f427e519190dbe78b95dd001a7cadb70a697092309e

SHA512
7dbf862a2d101a3cd7e465676556e00c509527fd9439a8552757e467e6b1a03c1d9e98f641c2d3898690419cc3c08647fc11ac2ddcbe397ffde182f59d3671eb

Download Submit
/data/user/0/com.igoldtech.an.swipedfruits/files/gaClientId

Filesize
36B

MD5
af4d86530d85de193e92c0f50a18d734

SHA1
7cc17f61d8f49266890de1b6492de9048387f4da

SHA256
a0894ebfc272884fdd0de4a944bd4e6fbea8ea10c448396f150e5c410fcbc36c

SHA512
0f03345b4ca74b0b3345c9da1cc6cbab420a5d7d4fca8ad198fbb70f2cead99101f537787c41ffb9c4f8d36768410c80fe23d38526f2814f91fdf6b1b7c3c032

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads