Analysis
- max time kernel
60s - max time network
149s - platform
android_x64 - resource
android-x64-20240514-en - resource tags
androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system - submitted
21/05/2024, 21:59
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
64e9fa192e37cc4b651f80be940bc82a_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
64e9fa192e37cc4b651f80be940bc82a_JaffaCakes118.apk
Resource
android-x64-20240514-en
11 signatures
150 seconds
General
- Target 64e9fa192e37cc4b651f80be940bc82a_JaffaCakes118.apk
- Size 5.7MB
- Sample240521-1wfmasbf71
- SHA256 15bd436ed893635d4a961bfe787cd64e98d27085f463b2857edd897dfc2b3112
- MD5 64e9fa192e37cc4b651f80be940bc82a
- SHA1 f44351d424c74aef917a73348e0c1de45e41b357
- SHA512 9d8a6ab3070c780e0a8dbf7f611aa4ed21a2ca3ab3d4f8d0b1a24ae4e93594b4f8cb61c78bc5d3215cd2409b1b686fec6084154c740f00089c6a4c7005998017
- SSDEEP 98304:FhwasIWczbs/0RI1yEIAGB1CKQAT3GAj1ireO2A3jHAaw5U18Cl:gGbDEENQIir32sHAawzCl
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo io.dcloud.H58614489 - Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo io.dcloud.H58614489 - Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener io.dcloud.H58614489 - Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo io.dcloud.H58614489 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone io.dcloud.H58614489 - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver io.dcloud.H58614489 - Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo io.dcloud.H58614489 - Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
- Reads information about phone network operator. 1 TTPs
- Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal io.dcloud.H58614489
Processes
-
io.dcloud.H586144891⤵
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:5157
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/io.dcloud.H58614489/files/apps/H58614489/www/css/mui.css
- Size 94KB
- SHA256 9a5fc559a57648efcffb6380283238f2839d7ca3dbd2450a61929e537fc6c986
- MD5 ebb58ff8d7c1785beb51ef6144a4731f
- SHA1 17bbedece0399111ce347350883ed45f50fa6f9c
- SHA512 cd5c5765d6087db879fbb38d69dc1a1e370f854a08895a353aaa7214c4c11b4191510e6eb177240f7918a4f0300c1f950ac6a2a5dba17ee49ff9e32e8239e34a
- SSDEEP 1536:oA8AZD61z/+3/mWcjox9ezmdY8L3Z89VfeLW0pxK3/oQx8pw/B3mTPoSphVA/CSC:oA8AZvlr23ygHTXbe3s0
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/io.dcloud.H58614489/files/apps/H58614489/www/css/mui.min.css
- Size 73KB
- SHA256 df89d3999831af89475a3f54aee4d1dffefe3e50f0b34ca880edf6023c39e226
- MD5 4375b1e6e638c8f244791d8b9b055dcf
- SHA1 35b8971d4be33897f87b1107e58e07ec170c3be8
- SHA512 ddd15139f11ff07ee225106432349dcf182d609022715842b71636b6cc3078d4054c8bb656933f6c7bfe6ebf8b2576b5cce91ba3233f13d275c59472dc1fa4df
- SSDEEP 1536:xQbiOTfiRZBOpOyQKYKtJRa9eZAMrlOHwxcwkDAw21nfGDZ/Ouv+OZpSDToYS1Y2:yfU3ije
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/io.dcloud.H58614489/files/apps/H58614489/www/error.html
- Size 2KB
- SHA256 f76baa467bd6c0885e2102d5d89013199e12e100e94f7a39c1c397c650bcb3bf
- MD5 bd79bbbe17a780db17e39bbaea40be7f
- SHA1 21a484890824acfd72b1f2aa4d9a3fcbc96f3a9c
- SHA512 a151680a463b02a59183cfdbe1110d6b6b248ebb7510840c652c9369e4a7b73a88a75db926880af3124b9ba26b71e1c292e0e5855b8689cc00ab0a9a1a096c20
- MD5 SHA1 SHA512
- Path /data/data/io.dcloud.H58614489/files/apps/H58614489/www/fonts/mui.ttf
- Size 29KB
- SHA256 b327c8e38b68245dac1fb9a8b5bf7f19fee0b2c656219b8dfeb3c906c1514ea0
- MD5 8820b7f6582a3c45b7527ae6b183dd2f
- SHA1 653442b2b482c577d07a631859ef5a76896d53e1
- SHA512 758a17a3881de1b8caa7fcbacec7279518909b4c667e3e12a498d29bec3b833c3279f69da07caebc25c4b940545aa1240cce1cce618e5ab939841b8bdb7c2564
- SSDEEP 768:nMaUNkr5LWRlb4d1wxiChonBpo8xYyX908USADt5+:nMaUNqWRlbU1wxiCmnBe6N6Hc
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/io.dcloud.H58614489/files/apps/H58614489/www/guide.html
- Size 4KB
- SHA256 02fa1fc59c826c52d7aa1acbf9428aae0d31d32d62c7b8643269c293f96e4be6
- MD5 a9f033d5d49138ff80448e23ca89fd72
- SHA1 efa0c582d26e304e38fe969fe117a2a897968043
- SHA512 15dc404e54becf818da728a256f76377802c1ffc8a85aaf99c2cd3e8eee476ec8f619910691e4b3282bfe4237cb54f3b7dd5cce58355b818c734ed0b99eaed18
- SSDEEP 48:0NuaM7XVVZuXJDX8DXToKyQpKN/n+//nPysr/+ebz/kb0fD/r/CE+Pfm5f/rU8ND:q2ZcNPNP+HPysrWczJfDjVf772ZSOM
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/io.dcloud.H58614489/files/apps/H58614489/www/image/180.png
- Size 9KB
- SHA256 604a9dd870ee056f4c21a10303ce69fac904a0da1a9b886841c564713333fe69
- MD5 43339bb5e159721a215d5f312e6afef9
- SHA1 241ae7d4fc61fbff2cc9c90a2395c2970cc5370e
- SHA512 bf2706f68eb29d63f8644b87373da5d49297420234988c612867afdf29bf6e0a582b06a23bb347424eec770b47507911bc8f1e908eefd00bfe500521617b2dac
- SSDEEP 192:3iEgL5Dfby3OeMdHMJabTBuALwmn6jqxozN55CwWsDT+4IBz1z0eoe:3Ded6juHMSduApn6j4aN55CwWwdy1zUe
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/io.dcloud.H58614489/files/apps/H58614489/www/image/error.jpg
- Size 211KB
- SHA256 b75265e5100a2b7d658a0c0d55eae0ad590a4117f5e783b89d1ad0e9e0771550
- MD5 43feaea11fb05720fbded8882e487a84
- SHA1 81ed8c256e0dd5c974eb980227ea358b17dd38fb
- SHA512 9d3dcc1fc21d143d1ba5f808fd074d49fb39410edc35e349cbf8d6be3efce6bd431fc0e9065a157fc48da2d43aefe24b429e7b5beaa313b22477b9d1794f9038
- SSDEEP 3072:ytVx5wdNKa4emQDPbBFNQwZ88VsKiYjeE+z3r0iHa8U8o9fq:ytVk/H4izvNQwDsX8eg8Wfq
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/io.dcloud.H58614489/files/apps/H58614489/www/image/guide_1.jpg
- Size 680KB
- SHA256 18dc970f9dc0ca7fa81c8642caecacdfbab19b6dd2b9374d05c0689150a4d6bb
- MD5 6d93bf88816e8e1bce43b7a08f5b15f9
- SHA1 93d47a72f3cb82a08e7bdcb9e889b8f8e254b7a4
- SHA512 075481328bf00f433f8afefaf4c3a8fe515c9c6635ac3813bd7cf0426b07a7ce2c5e184d0f0ef5f9a1741ef2b7ff871e20521a860989268db1e6834290ef2c74
- SSDEEP 12288:e1LIxG7zazA/YkI8m0djHC/uiPq7d7XRarQ2cVBF50/KjSVAJx:e1LIkPU8m0dG/usId712czbJUAr
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/io.dcloud.H58614489/files/apps/H58614489/www/image/guide_2.jpg
- Size 304KB
- SHA256 cedc417d4930c736c71214ba999ced95cc259f0e48b918f5f9b295ac3add22fb
- MD5 9ab386f6e73c4e97e26ac44196c6e4ac
- SHA1 079b3bad7aec4d7b8717658b7443884d84be4c55
- SHA512 fee90638b175ccba16bd0a21417f537eee4a2114ad4bcb98b14b0a9ffb8a6242a771a92b79aa711e2347941464120a1b4de63326581678feeb44420dce32885f
- SSDEEP 6144:mSSSSSSSSoyvyCjj4pE/+7nF83/BeAtWKFB+acbEIIetSyhjf8suHdyipq5ZAf7Y:DCUph7+peNIB78ftR8l9yipqaZuCx0Ia
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/io.dcloud.H58614489/files/apps/H58614489/www/image/guide_3.jpg
- Size 115KB
- SHA256 5925612c016964ac3f65962a8f3150a480f2461665b6f3182703e8f6b3524937
- MD5 99469b6dec0c680d99b695fce2d1a0ef
- SHA1 a93cae1d4f35840fac119f7aaf6357f0bae61618
- SHA512 eb6b32e857c2d1613974547b9cb5f90ce77a03fbd43ee00fbf7713365c930574ea2fb4cc782cea3259fe69f66df094d4699bbdb44db6fc6d7368430b3a9ee164
- SSDEEP 1536:14d/7PT2r3sazgZKRIttooXCkspVI+vGae7/Ek93k6DFjBM3F1Y2FOyIbAfklHat:6d/2r8holtTv7Yl9Uyo+AfklH6
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/io.dcloud.H58614489/files/apps/H58614489/www/index.html
- Size 1KB
- SHA256 d4d3b6a20cdecb832aa5ef7e25c790a35edb7b205274fc7bfad88e3d0742ecec
- MD5 344f3db6a874aaf8a0dda6b9e6e60e80
- SHA1 f0ea9850ef0563e9587ed85fd191d11c5f03daf7
- SHA512 3e5f798a23671d7a560dc6a23f6e02591c9f3efb7cc1691a9b6ccad3aba81aeb35c186b564a6563a9503d6d846f174d9db1f18c42283c03cf765f6194a440b78
- MD5 SHA1 SHA512
- Path /data/data/io.dcloud.H58614489/files/apps/H58614489/www/js/mui.js
- Size 257KB
- SHA256 e51fa6ce79b4f446d3af3b69671174f37c857d2a09ba1c68af0313dc17d57416
- MD5 5da36b198739e5dde315bc7a5eef667b
- SHA1 1f753d164e0c270c7848da87e2dc1a2dd8935ab5
- SHA512 e9293580c5f98b3070aa0292157066835dac9ae7f7b293cec901f6c734d6c7568bb6852a1d3395cd469f8fa6459aa7a25c8b367cc78f22e1e020fe8600ab31b0
- SSDEEP 3072:swj9QTf5fZcNEu57JiSUbqC6Fx/vBy3VFjoFTA03XQ6b2dmHvDDid/Wn:g6Cqm3PjotA0Q6aavXid/Wn
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/io.dcloud.H58614489/files/apps/H58614489/www/js/mui.min.js
- Size 120KB
- SHA256 d866d4c87c4b31171ce61159e6ba6038f5f438c16e322b4169d24f02298563f7
- MD5 2581360193449fd0d373f2a839ce035d
- SHA1 37deb9b93df772236f9eed2394239c899928bc8e
- SHA512 8fac395baf31b71d36ec5c1304aa089ee33eb1adc5c680a2a8976f49a65aa1b9aad4ebed536ef08b1558f1755979c3418fd0f31c8d1f6d6d8d6f576c000522ae
- SSDEEP 1536:bKWezK3mxRJq5JBdwTsrnlt6Va8WU67Vyy7lbjAlowBVwCv/p5CJp6Wm2sIMkmb:r7wTs/eG7lb5eJ772U
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/io.dcloud.H58614489/files/apps/H58614489/www/js/util.js
- Size 1KB
- SHA256 23d2e890c177bac6aad41d890d79df73457e7dcc4879cb7e95a3276adec41fca
- MD5 63f5c7d5b400da807aa9edff094dcb58
- SHA1 7da84adc5c40c1b947a2a7d743c93541105b1710
- SHA512 6ac3cc576cb409319d259225cee7c4786f70c5b614c907305a2ae3f1e8ab90c4cc0f04abc83cbf9eb53f2d241f725d65693677f7ce468235bda48e8cc90b7633
- MD5 SHA1 SHA512
- Path /data/data/io.dcloud.H58614489/files/apps/H58614489/www/main.html
- Size 2KB
- SHA256 017e74451fd019a2b790fccc7a0b6ecfb5a876c59ab0ea094ecd3ad77395ea02
- MD5 da960b9b38ea829af028e9e4c4ae3baa
- SHA1 425e8d170d490deff65104723f677d3cfa1ea145
- SHA512 fbecf488f0e1b13487b58cc97818710dd9609a2c1f7068ff0f1d0d64443966d0d89a78b9ee551e89aa83c4f4606b84d3fca72b05e36a0442fd516c6204854f15
- MD5 SHA1 SHA512
- Path /data/data/io.dcloud.H58614489/files/apps/H58614489/www/manifest.json
- Size 1KB
- SHA256 816ea6b6a73d2f54f6d5d6b7789c2d3c33ad8083a1586637770513e7679c4611
- MD5 4bbbbd58956bd085e4370da871c16292
- SHA1 8d00f3cf59655c2de6ed849c44bdace989ed8faf
- SHA512 dd7718a8f46a6dfb677c56516a821e53e4d5b8e1d3baa2e99da83f14b4c524a5c46f900eb3245e783964d4f73c1893d52ba1f1bbea782f13c872bb37e61b507d
- MD5 SHA1 SHA512
- Path /data/data/io.dcloud.H58614489/files/cnc3ejE6/eje3cnc
- Size 335B
- SHA256 86a9bb4985cca6c9636c4fd071bef4b70ba7b3a5eb51af869a1299dc2b1574a8
- MD5 585839d66722cfd02e40cb740cccb633
- SHA1 374c19200fee201b26d0153487a281a934615884
- SHA512 09bbe1bf1455861fd4732f2d1945c84bac34090906ac2fab75d144c22ffcf6bc585c8209e94a2b1919c8402df53966081a1af2993e12261ae4c4ac5568667d88
- MD5 SHA1 SHA512
- Path /data/data/io.dcloud.H58614489/shared_prefs_ext/test_app
- Size 24B
- SHA256 b161cb8b13d8e72eede73c460bb680fdbe9c3e163b76dd4f0add9b9b2bb20cff
- MD5 d09573d5529860abf83b4114b76ce58e
- SHA1 9d3e0fb13ac89ccbd28d7a7a667f5aa807a5a73d
- SHA512 658ebab1db2f2c5a98888e7e3fc0a2a0222334faf769c9a6575a997cf30e2427c2827d3880a2e16f73fffec2311ebc9be0052a8058fdb7777226b3afe4272014
- MD5 SHA1 SHA512
- Path /storage/emulated/0/.imei.txt
- Size 32B
- SHA256 326d9b22e05b75fa660a0b663b5fceef2a4934b997e49f87923b3c12e37abec0
- MD5 815040fddff9a927d0b524aefc06e41f
- SHA1 c5159d0ad0a8a43422e968dab427b51e7de01182
- SHA512 7143c05c58088e830a6663c5bc9e32a3af92b9142393a37161735d815d94026a7173917211559da5aa9b044816bb9665648934a89d4d008ee00bfb793e4ed8b0
- MD5 SHA1 SHA512