Overview

overview

7

Static

static

6

6c7f1d8065...18.apk

android-9-x86

7

6c7f1d8065...18.apk

android-10-x64

7

6c7f1d8065...18.apk

android-11-x64

7

Analysis

  • max time kernel
    179s
  • max time network
    135s
  • platform
    android_x64
  • resource
    android-x64-20240514-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
  • submitted
    23-05-2024 22:43

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6c7f1d8065b5e2e0696ef462e8350846_JaffaCakes118.apk

  • Size

    27.1MB

  • MD5

    6c7f1d8065b5e2e0696ef462e8350846

  • SHA1

    87697f642a8a1c200a61f920587f1ff873ed7c64

  • SHA256

    34ef1b71ba02f240915a49eb3246b6509ae269e1216e98fa3b61f62002cea978

  • SHA512

    6664dd6703e64e4d4fc3776de50f5a48885ad2e5415515df6766675fa3d8d4a91eae32ca33dbc1f2ae5033b048c0ab03c3b043503706e157fe7b921c275dd0df

  • SSDEEP

    393216:04fJ2N2+akTv64dN0U4g5uf52s2+Nk2v61dG0CTCFCowP9r5qDQc5q5t5J573sBI:xB2N2t4X0Vwux2s2l1g0gOes+

Score
7/10
collectioncredential_accessdiscoveryevasionimpactpersistence

Malware Config

Signatures

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

    evasiondiscovery
  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

    evasiondiscovery
  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact
  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
    discovery
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
    persistence
  • Checks if the internet connection is available 1 TTPs 1 IoCs
    discovery
  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
    discovery
  • Checks the presence of a debugger
    evasion

Processes

  • com.appsvision.gouttedecafe
    1⤵
    • Checks CPU information
    • Checks memory information
    • Obtains sensitive information copied to the device clipboard
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    PID:5098

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.appsvision.gouttedecafe/files/gaClientId
    Filesize

    36B

    MD5

    99c7b6206fa4398d0381e8dd8953e222

    SHA1

    66b2262502d3eb5491648f1a5875a14001d131c0

    SHA256

    e801730ad953092317776229105789459342741898ada709450e53ddd99e3cac

    SHA512

    683aaf7e1bfafab0907549fceca771086fdfc73ee16f412dd45378957052d92cbb9b639b76202bb6455cba2ce227ffb874a2302b0519fa79feb91ea4ca3f0f00

    Download Submit