Analysis

  • max time kernel
    161s
  • max time network
    145s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240514-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
  • submitted
    23-05-2024 01:41

General

  • Target

    6952ddbb0292a9f9faa4aca33fb97591_JaffaCakes118.apk

  • Size

    2.9MB

  • MD5

    6952ddbb0292a9f9faa4aca33fb97591

  • SHA1

    beb6635efa97ade179e4b96e9aa7dff1d34d3dab

  • SHA256

    714accd21efe642441ac783535dd8d55a39d3516e71280afb35346efd911c810

  • SHA512

    a7825e1a69e99f2ab25442a3e810ade0b9b1a304ed41c9114451b88f68728b0e933e4053e1b9d73b6edeb5f097971b79324773034138befca263cadf63129685

  • SSDEEP

    49152:beTFK7FKOytwJFy4OIBXbJZVYn5OSJ+wUeWTdGh/EFYl5AGjTLDernrp6b918rkY:beT0F3Iw7OIFJEkwY5Gh/7l1jzYnrU1K

Malware Config

Signatures

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Checks if the internet connection is available 1 TTPs 1 IoCs

Processes

  • com.netsun.dazpin
    1⤵
    • Checks CPU information
    • Checks memory information
    • Obtains sensitive information copied to the device clipboard
    • Checks if the internet connection is available
    PID:4481

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /storage/emulated/0/dazpin/visited.dat
    Filesize

    3B

    MD5

    e4c2e8edac362acab7123654b9e73432

    SHA1

    e8dc057d3346e56aed7cf252185dbe1fa6454411

    SHA256

    d0ff5974b6aa52cf562bea5921840c032a860a91a3512f7fe8f768f6bbe005f6

    SHA512

    0b3402a678ec2788804994fb2df9faf66eecbdde26553e320a8d4a154f53d840d2a32245998c38f885f01137c9fcf123f3752fc841508dc771fa6faaee689b73