Analysis
-
max time kernel
50s -
max time network
153s -
platform
android_x64 -
resource
android-x64-20240514-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system -
submitted
22-05-2024 02:47
Static task
static1
Behavioral task
behavioral1
Sample
65bf8a29f0fd119d1d0d6b052c2c4278_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
65bf8a29f0fd119d1d0d6b052c2c4278_JaffaCakes118.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral3
Sample
65bf8a29f0fd119d1d0d6b052c2c4278_JaffaCakes118.apk
Resource
android-x64-arm64-20240514-en
General
-
Target
65bf8a29f0fd119d1d0d6b052c2c4278_JaffaCakes118.apk
-
Size
5.0MB
-
MD5
65bf8a29f0fd119d1d0d6b052c2c4278
-
SHA1
0e941e3b52fe699a1d9bbf943e7829f2299605f6
-
SHA256
42b2ded4877d2750db85312e7f02e7dee6ef607101d9d4514d0f87810faa360b
-
SHA512
f59e2d9a76f223dbfa5fd00298d2de0bbd55507fcf22feea62eeadf8a1bf19cc8b41385d5a08eab78855dc8f5dcfc69f3ee3743cf5f22ca63c8b4e4cdb6aebec
-
SSDEEP
98304:tEWv1y/PfAVxXogEl/LvMYms6dP1fjyaeDGm1pZGS4kIKUc9UjoLOL:fv1yvyXogTCslyqm1zGSHUKUTL
Malware Config
Signatures
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo com.yxxinglin.xzid25591 -
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.yxxinglin.xzid25591 -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.yxxinglin.xzid25591 -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.yxxinglin.xzid25591 -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.yxxinglin.xzid25591
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD521c082252139650f5bf604351fbc100f
SHA1ac891965b034a9db9c5a87a53c42a08a3236d180
SHA25641db1892a0515c3f7487858ebb88edaaed523ed4eb1af75cd44cda6f222ca1d8
SHA512146130b7cc776afffcba47b6562845b2f9417d7fe06acfc61dbbf780919119f573b10c22668c7d4132ac4db9afac5c9bc7764728c7375d17477839ebf7412dae
-
Filesize
512B
MD5db217548cee5d7675930493c6149dff9
SHA17fb08cb644e52842a8b8b93a256fc4d81cd0c040
SHA256fefd9700b249d3f0ceac9fc17bab46ecdaef5295496de78f335817b2416c806b
SHA512fc2ecb7cf0ec2b65037a74662b458573cb2d4612669c9d8e1d2ba7bac99bdc98db02ba6a0e621cab5712b6135ed7882bbcd5aeef681b622db929b159a5be6917
-
Filesize
8KB
MD5b9f3bdf1b829c21145da61b31095a5c8
SHA1d32087074d11d5925d71fe804e703f1f3f748045
SHA25625537693fe04ca9e5d4d2f68573dabe905f4ab0f9addbaa7700c5e3beda2d286
SHA5127f83ac356333164ae9574150a70c42a29e80ff48102ae1ed1c444fb62a9432d955a68f92303f180ac5d6bca4c133022972f1ae46a0874b13774efac3ddc13878
-
Filesize
8KB
MD5fd1563d9272193a7326b166568469050
SHA151576689a657966cf6200265d1490c870c33a01b
SHA256f635010578b759af303389e9cdec5ec0fae0ac1c0ce4ecc5783336ed7b17841e
SHA512819736089b2e1010e505609947073d217c6af9ebd92788a7d6db1d80bc6c469511ab52135130bb3ceb137a9471f14ff41113bef63ef1f10fe70b5cc3cd37b39c
-
Filesize
36B
MD537e8e716e0e2f4a0b05cd9571d95b84d
SHA1f8d068f6931707bddb8cd69f706f2224ad1fea3c
SHA2567080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
SHA512e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6