9e14bedc5f5a619ffd5ed95eb98312384ac0da2667bacbf3daeea5f359b67212

Analysis

max time kernel
179s
max time network
157s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
22-05-2024 14:46

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

679f92481a5fd52740f69c7639a4311f_JaffaCakes118.apk
Size

600KB
MD5

679f92481a5fd52740f69c7639a4311f
SHA1

5e07cb8a16ea233ee617897ef710f799f3a4fcd5
SHA256

9e14bedc5f5a619ffd5ed95eb98312384ac0da2667bacbf3daeea5f359b67212
SHA512

8b01161d2761f7a39af2254e72d37a8ac48ae88398dfaec6d9013d556a4fba84968f86170ee9001661b15c220ec9534905f5eff91acf9db703976062f2a3b394
SSDEEP

12288:uEQxhv+5dElRinRQomdi3p/QTaRHa0fiadICelXXzua9i:uVRC2inRQfuQTIHa0fiAbelzuaU

Score

7^/10

collection credential_access discovery evasion impact

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

T1633.001

T1426

Processes:

com.tk.tmovie

description ioc process

File opened for read /proc/cpuinfo com.tk.tmovie
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

T1633.001

T1426

Processes:

com.tk.tmovie

description ioc process

File opened for read /proc/meminfo com.tk.tmovie
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

T1414

T1641.001

Processes:

com.tk.tmovie

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.tk.tmovie
Reads the content of SMS inbox messages. 1 TTPs 1 IoCs
collection

T1636.004

Processes:

com.tk.tmovie

description ioc process

URI accessed for read content://sms/inbox com.tk.tmovie
Reads the content of the SMS messages. 1 TTPs 1 IoCs
collection

T1636.004

Processes:

com.tk.tmovie

description ioc process

URI accessed for read content://sms/ com.tk.tmovie

description	ioc	process
File opened for read	/proc/cpuinfo	com.tk.tmovie

description	ioc	process
File opened for read	/proc/meminfo	com.tk.tmovie

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.tk.tmovie

description	ioc	process
URI accessed for read	content://sms/inbox	com.tk.tmovie

description	ioc	process
URI accessed for read	content://sms/	com.tk.tmovie

com.tk.tmovie
1⤵
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
- Reads the content of SMS inbox messages.
- Reads the content of the SMS messages.
PID:4630

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/storage/emulated/0/2024-05-22WJLog.txt
Filesize
83B

MD5
07da7fea98503b3e23912f04b0f83867

SHA1
b41e43d2bed950d9d987f36aa71194e324e9e24f

SHA256
3a8a91ac62a312fb043d8113f1c176ae5192bb28727d8c9f23555959c00e58d1

SHA512
5710ad74831de328bdb16f35b26c3261d2f3fb8919c352a06a57649c4e4d2d5ee251199352558a2dfee432865f371ab8c18bac9a5f8295880672a45fe2fc8ad5

Download Submit
/storage/emulated/0/2024-05-22WJLog.txt
Filesize
81B

MD5
8742bee78770b95805749aaffbd9d826

SHA1
dbd1266bd3c63f67a126c4a06fd0d60736d7ce8a

SHA256
d821c3e84847e6d7b7213c7e8b3298f4aea10f38cf2b39528fc679d765716386

SHA512
6d6d057b78fa9aa20a19454e39913340477a9ba27b5374951cb734b67ee2f533290c33c595b659ece8608eed27d4294f725798934fa4d62319898072f85c272d

Download Submit
/storage/emulated/0/2024-05-22WJLog.txt
Filesize
80B

MD5
0ca3aa8875a434a060b4d3f05406a441

SHA1
f5126354cc1d21f3b915e984ca348067e9ad0b95

SHA256
d0f3770caf130fb2c65b97aa82bc7047152b5ea630e7acf1f9e8898d9fc563b8

SHA512
5c595dc9e59f4098ea84504048fbdb779da0279d0a98fdf3ffbc4382fe8057f4eca9c0ba415e06747330349ae6bbd5485770ef02771a10b03e7bbdba7c40efdb

Download Submit
/storage/emulated/0/2024-05-22WJLog.txt
Filesize
84B

MD5
7e273f5bd293e1143934cf45ecc3b4e9

SHA1
f4a1681c9df5d62811ca65af5fd906375076c616

SHA256
ff9f4281580539df1b43c42d67a84943e2a4537d79882dd8b541d83635c62c40

SHA512
8dbf6c458a487070663caad139d594bd28ed128217c175dd13a642f83137cc64b11e97fe9fbb86ff5afbc732dc15b900e1ae2413eb269eef2b90d553ea9bed74

Download Submit
/storage/emulated/0/2024-05-22WJLog.txt
Filesize
79B

MD5
c84c7bae2623dd42b37416d306d54829

SHA1
c5c40e436b2d3a781667005826b593fab34e4097

SHA256
60999c21e9224c9d163b3684536f341be16ff29b2e54dcb483a39b24d6dfd78a

SHA512
3dde9ab3c0ae7996ce89dacfa37074cc24b188ceb06cc0561723d32657061925792ac55a94777c4650d51a470fa24b9a0d0dcd4ce0fc9cb53c8f2a8226465762

Download Submit
/storage/emulated/0/2024-05-22WJLog.txt
Filesize
277B

MD5
5f76ad56e49febff284559a69165e509

SHA1
2eb8bece17d3ce9819e32e42855af025bf839768

SHA256
1cd60de7cab492343de6d6bbf3afa0314b96b5e1629cc3420c9c850fb8e6f463

SHA512
f8e3ab3ef7a3b112af924ae8e1e681060d1d9bc49b753cffff7b91139300fc767b4409eea665460c0670eb390cbd77125afef83c1726a9eae9844389303508ca

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads