Overview
overview
8Static
static
665aef2f5f4...18.apk
android-9-x86
865aef2f5f4...18.apk
android-13-x64
7core.apk
android-9-x86
core.apk
android-10-x64
core.apk
android-11-x64
res.apk
android-9-x86
res.apk
android-10-x64
res.apk
android-11-x64
update.apk
android-9-x86
update.apk
android-10-x64
update.apk
android-11-x64
Analysis
-
max time kernel
8s -
max time network
133s -
platform
android_x64 -
resource
android-33-x64-arm64-20240514-en -
resource tags
androidarch:arm64arch:x64image:android-33-x64-arm64-20240514-enlocale:en-usos:android-13-x64system -
submitted
22-05-2024 02:26
Static task
static1
Behavioral task
behavioral1
Sample
65aef2f5f4dc2f9ef5715998349b97c6_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
65aef2f5f4dc2f9ef5715998349b97c6_JaffaCakes118.apk
Resource
android-33-x64-arm64-20240514-en
Behavioral task
behavioral3
Sample
core.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral4
Sample
core.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral5
Sample
core.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral6
Sample
res.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral7
Sample
res.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral8
Sample
res.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral9
Sample
update.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral10
Sample
update.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral11
Sample
update.apk
Resource
android-x64-arm64-20240514-en
General
-
Target
65aef2f5f4dc2f9ef5715998349b97c6_JaffaCakes118.apk
-
Size
6.1MB
-
MD5
65aef2f5f4dc2f9ef5715998349b97c6
-
SHA1
1c1126263ebfba8aef885049aab2cf4343c1f567
-
SHA256
850d1fb8e6a4bdfac25ad7201cd87387a6997cc92ddbfc5ebf926eb14a5dc2e9
-
SHA512
b1c1a7cc1b1df73f105e85c28aaae22f4c935061f1429f096f1256d7da26a5a7b37d3433b4b3dbca3e00e97671b16d471f9350a93f9e0f17c348f1d2bf091bbe
-
SSDEEP
196608:kp7fPwVZnfHbH843vHd9pr5rGjN/yVVGCb7Q7uwteyoteyinP6j:QcdbH/Lpr5rGJ/yVvc+iPg
Malware Config
Signatures
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo com.fyjx.qipa -
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.fyjx.qipa/app_libs/update.jar 4248 com.fyjx.qipa -
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.fyjx.qipa -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.fyjx.qipa
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
442KB
MD5f84ba6f0daba937e6d435442c99e8387
SHA1038c9ca9c9ed1c3321bf7fa641975be25fd2241c
SHA256428827b1d99667c2608ac1c8708b9e3c87018134c1e640b1990cd73adbb77088
SHA5129a8091c2cd339187341868c4f7ac473852c9cff788d53e6148f99e3093ff6129155cdf985be556dfee4d58b1eb9ca39093fe82bc04d3fab147534dd47781a50f
-
Filesize
6KB
MD53eea0fcda4a513b99cedf31c7452aaf8
SHA1071da147eacf17f1c10fc6362ac43839ee96d5a2
SHA2562a9b79160a4eae5fea2e7fbd3e0498eae8af9d0e8d784b18ac81c3468da6e0a6
SHA51212a20677a8f36778ceeead1e35a9a20dce8ecc9999803db2e3e40312b74847ccc9efbc649b4949dae38520287b7a01bd50c81dbf9fe1db8fb7e9ecd070801880
-
Filesize
12KB
MD5a052cf31f70cab7dc772b4c59911d43e
SHA108a2a8dd43484ac2adf0eb2681d57c2173360d6f
SHA256f5f594fcb6fe90cad0632fbf30f8fe7fbf9a87f06dca9e00208e6eb85c778747
SHA51280fe152fe391ca50f026b6144b364bfa889d4e85801a836b8641ddfe7e9ffe435796dc40e6314a05da0a1e9df781c09c681a88d32a9b0541e93b4e67f2dbd8a2
-
Filesize
1KB
MD55cf1d5576636b3c6867668cc8ffb91fb
SHA151499a665fc7b94d2aaa29a2407775cdcc64c168
SHA256daced66851f99ae059ace4eda0ec87b8c5415385bbe574b9093a82740a7b040b
SHA5121d60fb0d44c9d99fd0c1b16656edaf052c344ecc03fec2db5c7e283f9edaca4d06fc0f89d7db75522a7eaae4ba443b299a8e410cc471339df729dfc2ad320a7f