Analysis
-
max time kernel
88s -
max time network
132s -
platform
android_x64 -
resource
android-x64-arm64-20240514-en -
resource tags
-
submitted
23-05-2024 22:05
General
-
Target
6c6868812c3476dab272f10b18663313_JaffaCakes118.apk
-
Size
3.7MB
-
MD5
6c6868812c3476dab272f10b18663313
-
SHA1
1de4223fa1a65235f69ae30834c362f108d0abbf
-
SHA256
65f1d1574f859e0a13151ffd8d78e4a68a4279baa31c96d6faf194cabffeca29
-
SHA512
c887a9135f4bcd47f961f6a8e2a105ba3518a550f64a2ba4fbc9f20e76a1b78d8e48c2279e60a523a8782b2d9820df44a0cf79fe5014fe45d33a243b8595a1cc
-
SSDEEP
98304:DFKV8eTeOC6tcBEA5o5S8L4E5fsbDQ/aAiCmNLg:RM8eTeOMBh85qbDBSF
Malware Config
Signatures
-
Requests cell location 2 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Checks if the internet connection is available 1 TTPs 1 IoCs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes
-
com.baoyi.weixinlingsheng1⤵
- Requests cell location
- Checks memory information
- Obtains sensitive information copied to the device clipboard
- Queries information about the current Wi-Fi connection
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
116B
MD52f0f62df66e0902640054d900ddd5fa5
SHA1fc79d45972a14eb157bdeb44a4d45790bb546a4b
SHA256ee06f3f1fe63e5b53b443f677a017ba8333651929cdcf77559bc70e15edbe7ba
SHA5127db1f3d521e6f229cbf41f8a4d8957f6699749816f95a03009c63d493e878938d07a859f046e168c8cd7f5c07b3313749e12240275e7e60037603b7656c2e1bb
-
Filesize
25B
MD52d805b13f2f28dc3ca9bbcc000f49bb5
SHA19eac165b4d81258fd3967cde5cc53b53b1dabcb1
SHA256c8a6624f390568f0ddcb9841336aec6a564460fdaf6624e562b32935b8956f19
SHA5125db8c57bab36bcf9db698c1dce70318cbffc156dd1d1c1e09e5b7ba60aff07b598ebbf26c4bd8a2b03bd6e59ef2dde2d944a22a8d8a19ecc8378e83afb7c83b0