Overview

overview

7

Static

static

6

67ee9bfbfe...18.apk

android-9-x86

7

67ee9bfbfe...18.apk

android-10-x64

7

67ee9bfbfe...18.apk

android-11-x64

7

UPPayPluginEx.apk

android-9-x86

1

Analysis

  • max time kernel
    20s
  • max time network
    154s
  • platform
    android_x64
  • resource
    android-x64-20240514-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
  • submitted
    22-05-2024 16:48

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    67ee9bfbfe7df5b650a8a69afe59cd63_JaffaCakes118.apk

  • Size

    4.1MB

  • MD5

    67ee9bfbfe7df5b650a8a69afe59cd63

  • SHA1

    629cca00ecbfd41a77ddf36c72e2b185191288de

  • SHA256

    5ffd8374ace87d26be6a7a2028b5988934dd7aab3c6f16b069559dcff7d51ce6

  • SHA512

    b84f7531fe284abcd5512098b9cc7e06473d6521eb8708a797b61a27c34d4bbaf9b5340820d25cbb946092165cc1bd7a618c670287118b9f98b5cc368473c171

  • SSDEEP

    98304:F9R9ml0wEdS3ZPBXYsupKdw+taxMx9ZUrHxyjywJBg:l9ig4ZJEp72axMxgrRWM

Score
7/10
collectioncredential_accessdiscoveryevasionimpactpersistence

Malware Config

Signatures

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

    evasiondiscovery
  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery
  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
    discovery
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
    persistence
  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
    discovery

Processes

  • cn.zhui.client3088934
    1⤵
    • Checks memory information
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:5117

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /product/framework/com.google.android.maps.jar
    Filesize

    315KB

    MD5

    4899aca36d1ed747a447dcac0d101a62

    SHA1

    32e43edc0bf3e036683ea8639472e6cd31ab9929

    SHA256

    67a651acd867e046fb4463b31ea584c1468f7243a9d1e2efd34059e8ee2f130f

    SHA512

    50b23dd279a9efba566c6a6523c7537723c0cd6dd3e4871f1cbdb8d5bc355caa3ddea99452b1c8e5356802f812b3768066a9848b93d715bb8bdfa455b704285f

    Download Submit