Analysis
-
max time kernel
155s -
max time network
164s -
platform
android_x64 -
resource
android-x64-arm64-20240514-en -
resource tags
-
submitted
23-05-2024 02:41
General
-
Target
697a6472ed5f06d54b42064e5e6850f9_JaffaCakes118.apk
-
Size
2.3MB
-
MD5
697a6472ed5f06d54b42064e5e6850f9
-
SHA1
20a9f3b505707157cf6c4408c6c66de0c2b47e09
-
SHA256
db0a1bc3fd2329470b9ba4df85badecd3cba7b5ac997f3c04e7f4a1dc1faaf73
-
SHA512
7c7a3a32f4af5a23bc94479e9ab76caaca2bfd899cd973f4cfef90a61855c23c96f50594b88e1002e787eb0c94f0411abd6ffdab00bf72cf8dfd921540d11355
-
SSDEEP
49152:tzZSmIi856LJMe39AsDzX90b6AIoBN5/NNyf:vvIiDyP2z9dLoBN5yf
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes
-
com.cyou.cma.clauncher.theme.v591975b04f1f6705f128bbca1⤵
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Checks if the internet connection is available
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.cyou.cma.clauncher.theme.v591975b04f1f6705f128bbca/databases/http_auth.dbFilesize
20KB
MD5ed710a8968441282a5939621c2771927
SHA1b6ac28b3e32ea66790c52d6934608b5e71f3d5b8
SHA2566e7b95a553c2528d6c564296a9e481a6d913074c35011a19f2da8e4807c53bb2
SHA512547d7c530ad345edf6b880b7685d2ddf3770e595fe3a40041677cb0c296b15ec6d9e8ebf3f2db51624be41766a0af6764512f1c352d5fde22bdea81d7c08e364
-
/data/user/0/com.cyou.cma.clauncher.theme.v591975b04f1f6705f128bbca/databases/http_auth.db-journalFilesize
512B
MD51f9aa5100e04d9628a341bb252d562d7
SHA11b088b8c253881d441a7ad9ae4539ba147bee908
SHA256a774e52fe341fcaedcb295951f4aef070a5b2fd23764ecc16b4c67b97c8458bc
SHA5125c17d11353480bb1b82e07b90cd5bafb957217419bd562584b4e21e18e37d4a76d9c92d5d8980d56b0615cb752dad55e29ed6e63f6b88e3d2ec71996ca97f5ba
-
/data/user/0/com.cyou.cma.clauncher.theme.v591975b04f1f6705f128bbca/databases/http_auth.db-journalFilesize
8KB
MD5cfb40c1dd0f9bb155bef9ade6c23b893
SHA162521ff2b343a5097855c3a73f3d31a56e449d50
SHA2569e03b41a9a7447033cb2c9adf729d9862ac658fdec47830fb58a1c0b036879c3
SHA5120eb8444fd71bb0a79cb45529075996eef09f692d9121d3f4e2cf0bd484f84b89f00a6893919e6427ecc5af3be742668cb997ce55409730efba9ae537413d9a1a
-
/data/user/0/com.cyou.cma.clauncher.theme.v591975b04f1f6705f128bbca/databases/http_auth.db-journalFilesize
8KB
MD56fbc6d8adb41a1f84e117ca2ebb04f9c
SHA1389b3b7b1286887468f7580dbdab3e55ea7af4aa
SHA25686a64a1c2cea5a2c3e840a0edd56409764b8511ff2bc52003a90c06a565a95d7
SHA512958571c39fabfe400ad630437fc636a433ecbd9fe074709648c2cf384e4410c1c28f46e06a14219ce6daedec7b83859b5309d36885aa14858d91ebfc5ef0d2f4
-
/data/user/0/com.cyou.cma.clauncher.theme.v591975b04f1f6705f128bbca/files/.imprintFilesize
773B
MD57a854cab6e972cd3946dfadd0da77c28
SHA14d66fd630c1a672c4148fc10e802eb941ac9c875
SHA2563ac5b4ece0119c1683da7413a91c605301c32d3d705d2a9c4e71262465821e08
SHA51200a9c32d7dcb9e3d8f028e4ae396e822e81a966d7919ff363eb047edf1156145c3bf6495ae17c5caced7fdd520123eb8c656216cd4ed30a4225563ca169b51ea
-
/data/user/0/com.cyou.cma.clauncher.theme.v591975b04f1f6705f128bbca/files/uuid.mdFilesize
32B
MD5999dd03227a2191cfce920d34649f141
SHA1dec868e507532965fc1a64f3ef1741906a1cbbd8
SHA2567d3b57a47c9128bab1db7ae463043182a5a2cdec7d9b1af0f9752eb455e87660
SHA5125e8bb0455967d1b12497102a1409428ca1522013e5c1f9aaa1dbcfe09d58b6f88cb9d5cfbec429199435dbbc20a9fe6f01063552afea6c9b4ed972c5a374e0ab