08772e30e28aecfc9e67aa601d7adbd2c929e323a435a66f3265a9a0d6a8dbe1 | Triage

Analysis

max time kernel
157s
max time network
182s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
14/05/2024, 21:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

433503b0ce45dc45db4a0ee38f6bd26a_JaffaCakes118.apk
Size

2.2MB
MD5

433503b0ce45dc45db4a0ee38f6bd26a
SHA1

6d94be09bf5a4a8e03e2b20fa964d88092c66481
SHA256

08772e30e28aecfc9e67aa601d7adbd2c929e323a435a66f3265a9a0d6a8dbe1
SHA512

0ab91b5650d6527960299609c03e1b0fcd6687b26ada93f3fd853614aea2f36d9f9a7d54d8db3211da138ca7f134841252bb421939cc40b8b3d4d157867f53bd
SSDEEP

24576:UdQZUNenfFhzSoVfdQZUNenfFhzSoVDdQZUNenfFhzSoV8lcqaQ50Tc5BvdQZUNc:UdQIC7dQICfdQICo8QCTkBvdQICF

Score

7^/10

collection credential_access discovery evasion impact

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/cpuinfo	com.fknsgsyzs

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/meminfo	com.fknsgsyzs

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

Transmitted Data Manipulation

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.fknsgsyzs

com.fknsgsyzs
1⤵
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
PID:4528

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Clipboard Data

Discovery

System Information Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Manipulation

Transmitted Data Manipulation

Replay Monitor

Loading Replay Monitor...

Downloads