Analysis
-
max time kernel
179s -
max time network
132s -
platform
android_x64 -
resource
android-x64-arm64-20240514-en -
resource tags
-
submitted
19/05/2024, 20:33
General
-
Target
5b53c4b07aa9e3acf156a6982b3b5403_JaffaCakes118.apk
-
Size
1.9MB
-
MD5
5b53c4b07aa9e3acf156a6982b3b5403
-
SHA1
2964e38a909694f0365e076590e77ccf7a4e91d4
-
SHA256
debe3bc91c1b33828702efe2e04553596dea346b6c1632e21c64d14640c31b91
-
SHA512
d4c7f01dbbdd957b3c8c03fbeea2194418c410199df31cb65723006633bf552a60f87d6a52a0c152a9fb64d03e3695dcb2fee54241b324e607602c920d43b213
-
SSDEEP
49152:XxN9b1SEknXI5yg18ZXjcopbQfHhsSEUgbXziooOs:z9b1RknXI5ygqZTcopiHh7EPXzio/s
Score
8/10
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 2 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Checks if the internet connection is available 1 TTPs 1 IoCs
-
Reads information about phone network operator. 1 TTPs
Processes
-
com.ar.arpOnePieceSMSTones1⤵
- Checks if the Android device is rooted.
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
- Checks if the internet connection is available