Analysis
-
max time kernel
161s -
max time network
145s -
platform
android_x64 -
resource
android-x64-arm64-20240514-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system -
submitted
23-05-2024 01:41
Static task
static1
Behavioral task
behavioral1
Sample
6952ddbb0292a9f9faa4aca33fb97591_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
6952ddbb0292a9f9faa4aca33fb97591_JaffaCakes118.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral3
Sample
6952ddbb0292a9f9faa4aca33fb97591_JaffaCakes118.apk
Resource
android-x64-arm64-20240514-en
General
-
Target
6952ddbb0292a9f9faa4aca33fb97591_JaffaCakes118.apk
-
Size
2.9MB
-
MD5
6952ddbb0292a9f9faa4aca33fb97591
-
SHA1
beb6635efa97ade179e4b96e9aa7dff1d34d3dab
-
SHA256
714accd21efe642441ac783535dd8d55a39d3516e71280afb35346efd911c810
-
SHA512
a7825e1a69e99f2ab25442a3e810ade0b9b1a304ed41c9114451b88f68728b0e933e4053e1b9d73b6edeb5f097971b79324773034138befca263cadf63129685
-
SSDEEP
49152:beTFK7FKOytwJFy4OIBXbJZVYn5OSJ+wUeWTdGh/EFYl5AGjTLDernrp6b918rkY:beT0F3Iw7OIFJEkwY5Gh/7l1jzYnrU1K
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes:
com.netsun.dazpindescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.netsun.dazpin
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/storage/emulated/0/dazpin/visited.datFilesize
3B
MD5e4c2e8edac362acab7123654b9e73432
SHA1e8dc057d3346e56aed7cf252185dbe1fa6454411
SHA256d0ff5974b6aa52cf562bea5921840c032a860a91a3512f7fe8f768f6bbe005f6
SHA5120b3402a678ec2788804994fb2df9faf66eecbdde26553e320a8d4a154f53d840d2a32245998c38f885f01137c9fcf123f3752fc841508dc771fa6faaee689b73