b531febe6c7a95f197725e73977262cdbfb59a386100ee701e03d373d825bbb4

Analysis

max time kernel
157s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240506-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240506-enlocale:en-usos:android-11-x64system
submitted
14-05-2024 07:59

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

40c4c345080d729d2033062cd147266e_JaffaCakes118.apk
Size

13.6MB
MD5

40c4c345080d729d2033062cd147266e
SHA1

ec1c686ba0e087423bc1d2a459c593b9125266fc
SHA256

b531febe6c7a95f197725e73977262cdbfb59a386100ee701e03d373d825bbb4
SHA512

e10321888f40b8e958b4a05cc531c783ab2b5750441becfa6178feaff533b60cec8b44356a30d654d278919f07eb8d7f2cc6cc6bdd5cd2ef25263a817ef7af8e
SSDEEP

393216:nLFTkxdghRDkFlEtO+d+MyBrL2AAiWlGOfwflSsdX6gkfC:1bUlEtOq+MyBre1sdX6xC

Score

8^/10

banker collection credential_access discovery evasion impact

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.app.attacker.iiiinqyliruskefrukbf

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.app.attacker.iiiinqyliruskefrukbf

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.app.attacker.iiiinqyliruskefrukbf

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.app.attacker.iiiinqyliruskefrukbf

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.app.attacker.iiiinqyliruskefrukbf
1⤵
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
- Checks if the internet connection is available
PID:4944

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.app.attacker.iiiinqyliruskefrukbf/files/Roboto-Regular.ttf

Filesize
112KB

MD5
230e0e1a8b7a17d5f3f03de75adea5a2

SHA1
42dd3daecfa9192c08fee4bbd3bea78b14dd6e62

SHA256
00ae3fd7698bec219473edf68171a0f14e6cf68d363eea59373156e0b090de11

SHA512
1fedc2e66c80fde9e093e032e571883221ea57a4e24ded7aba83d11d42c8709128ac98bd6f1f61d0d8bdd3a5b6af6c7cbd45dd1b849075fbf44515de0e586826

Download Submit
/data/user/0/com.app.attacker.iiiinqyliruskefrukbf/files/close_button.png

Filesize
1KB

MD5
6d79997d240bf8146886e4bc63f31db3

SHA1
6e033e83a010d249d6e24b9ea8798cfe99b6d778

SHA256
17e1977137c8d19334573c7add2e7ab505ef55e08b5c9e6e8714bd8ad75735a9

SHA512
95f5b92fba0fbb344526a588ea4c16356fd149b84ca5e5c45e3c982d11a7f430d07fdbc181b084d0281c91eec36c0a59207c7bb0157ec7615ab0d682582a01ef

Download Submit
/data/user/0/com.app.attacker.iiiinqyliruskefrukbf/files/drawable-mdpi.zip

Filesize
7KB

MD5
1ce2bae53e83006c65257cd205fbefa7

SHA1
dcc5a869f0a13c01a1f76527356933218d7fc5ec

SHA256
592c853a39f81ac00c92acd48a8cf0120b47101d7ab7b5a33f523869ade8dee2

SHA512
534ce1fb933d9b389fdbc8ec372aa67bd549da47441a0d93c8d62a190319b85ebc279dc2027379e38a1944b851d548730d26084cc063208e0802ac6cca17f9b0

Download Submit
/data/user/0/com.app.attacker.iiiinqyliruskefrukbf/files/drawable.zip

Filesize
11KB

MD5
55c53d457904480c917ae919026e5919

SHA1
5206401071ae506ed8a730ddad2eea8ea6d45eef

SHA256
9313e65192a108ab22d94239028c5caf4e4e7efb8c1072c0b985f679c7cb82fc

SHA512
8573e6dd4c697e107defb6c98cffef4e6774b420b5fe94695bcd31ba1aafb3914ea68c20b957edc984fa742272fc5bbb497506a7e91ec59f665a2d27aef0324f

Download Submit
/data/user/0/com.app.attacker.iiiinqyliruskefrukbf/files/empty_star.png

Filesize
1KB

MD5
73aa466d5176127dcf290f2727eda17a

SHA1
8cbaf9e3ea1f60a11a468a4faf6b183f53f84a25

SHA256
d3159015a641eaa8524d530f4e35fdcc19a8bfa2679c7d25c4247c262babdc4e

SHA512
372a82391121911561e2938095c414b0a156c3c4bc2f30ff3f6b5515172231daf6d699edd2710165f22d324e4419be9f0c55682e53d1d8c9bf013524a092ba82

Download Submit
/data/user/0/com.app.attacker.iiiinqyliruskefrukbf/files/filled_star.png

Filesize
1KB

MD5
685f9e06c0990c57fd21bcfe47ce706d

SHA1
6c15fd6142f6e2d081377abbb07e302261859871

SHA256
deea08857a7c4db40ce82f2d129660fc0d4f0537cf8effc8e54b8fb6d07dab6f

SHA512
f4356a940e3ee404ed6895374090bc2cbbb226b49b84ad17dac0a26a42e0e7479c43989c09dc17fd0da2192f2fbb08833b3b46ee561b7dc0047363a49cc4d662

Download Submit
/data/user/0/com.app.attacker.iiiinqyliruskefrukbf/files/half_star.png

Filesize
1KB

MD5
b1657a6b1b87d76617fd7db36dcfaa82

SHA1
65bd6dc7c7abb02ae7c5650e65e544d8e060e27a

SHA256
c7e35b796c71ec2b3b2713961a0777a09e261f8056d304550addf39c638f44b8

SHA512
d1dd09840103e98531105b428e374672531ac9d33a652fcd091aa94d38a8699a6e99ac5822e67b293e68513307b28e986412a1a84d55d73791c9be95fe1fc18e

Download Submit
/data/user/0/com.app.attacker.iiiinqyliruskefrukbf/files/info_ex_s.png

Filesize
3KB

MD5
f8e42efc5fb6d75ab8e928822c83b535

SHA1
bb2535f79e03481a594ede3acdf1d956fd94b3cb

SHA256
0abf37985d6e83fd45f6f9f854c3d8e2fd0063f71933f1bc07772a9d54e561e8

SHA512
9102e9551f335e7e843932b44274ede4b0f2212a3bd8b0dc509083456799582067966cc70d4694c9c18e369f6863e93ad0f513f938c029ea60be7ce73e8385cc

Download Submit
/data/user/0/com.app.attacker.iiiinqyliruskefrukbf/files/info_s.png

Filesize
1KB

MD5
2aa3e72c2f48b2297c27f997c06f5de1

SHA1
e02b540bcbe25cf6a16e2e9108ddb1be745476bc

SHA256
97b5a55d551a037126c25cd939d369881e597ff181072f3e251b7cc739e74354

SHA512
6cbb2ede58606085a3bf07d78aa7e299ba431c5090e258a6cfc798d1fd178a458483b135f8066854b4a7dc2012d83b437779efa81d163c1b0ded00ddc75c9f60

Download Submit
/data/user/0/com.app.attacker.iiiinqyliruskefrukbf/files/logo.png

Filesize
1KB

MD5
33104d50635ccc592a0dcdae61f7c32f

SHA1
27b4d0db908f5a5af7d5256fadd24d90a80cbab1

SHA256
a7a8e02e7756d0ff57848337b8bc63b6af1b041183fa2ca13f6b1795d9623cd1

SHA512
ebd4cd3fddbb574a8abe3d6545849323826e9e323fc1b145ce0711e744d8ee74622605a13e2b77e5c2cdf636555244d83506113c389708d2826190edfa3463b6

Download Submit
/data/user/0/com.app.attacker.iiiinqyliruskefrukbf/files/resources.zip

Filesize
56KB

MD5
3cd55f6a8acbfd7a2a837f7ef56fef55

SHA1
fa7307e7ce4dc0e0fb2587a65b1959877a4e65d9

SHA256
0ee5fb3e1c0cc82b3be0a9d85e21ab645eaac20a1bc0c63b3c61dc2db2fbb969

SHA512
6071cfedbcb0bf2b0df8629b6d78115bc855491b3dd920e7a9cfaa8fd674be23f7eb275ad1f43d3d97a348f7ca844d4863a98ff3755d9cc52eac3eda4e7b3d1f

Download Submit
/data/user/0/com.app.attacker.iiiinqyliruskefrukbf/files/tab_side.png

Filesize
2KB

MD5
7d68d6523a1257de1310bfb7b66cb3d6

SHA1
1a35d821fc51bd627626cfa10d256d647acb88b4

SHA256
6148d3dc89c461a0147a9c4de14caa2a2ad1d36ccce75936433c9736c9eb2996

SHA512
861fda4b4e55d3b6f3158845e64d14453d7ecbeb375070c08920fa0a8a55f32c2ba86b626f02a461f90b4f7cc28b56ddcceef064bf0cdb7096d84017bc40b6e3

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads