Analysis

  • max time kernel
    155s
  • max time network
    190s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240514-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
  • submitted
    24-05-2024 08:08

General

  • Target

    6dd64369b6847899ce283cd0ae6bdd60_JaffaCakes118.apk

  • Size

    1.9MB

  • MD5

    6dd64369b6847899ce283cd0ae6bdd60

  • SHA1

    67324744f73392903a0f89dda8e4d81741d32f53

  • SHA256

    6b4d201bfe3ec7b7e235d5218d88d98618fc5535961342f0a9c3d7cb529ef4fb

  • SHA512

    322e22b3da8c98f92c7eabf3815c3f8da551541f3a28e623b13c1c686d28d5e46057bffad33c07a5eccb40038771dfcfe02872380b4df74a7c8d2f3e9602f724

  • SSDEEP

    49152:LwuyKaz4XDNj1Gd5gln6l0jY7+IwvXEE+yD:YKaz4d1O+pjY7+pEUD

Malware Config

Signatures

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

Processes

  • video238.sex.movie.fsh
    1⤵
    • Checks CPU information
    • Checks memory information
    • Obtains sensitive information copied to the device clipboard
    PID:4595

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/video238.sex.movie.fsh/cache/~test.test
    Filesize

    4B

    MD5

    098f6bcd4621d373cade4e832627b4f6

    SHA1

    a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

    SHA256

    9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

    SHA512

    ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

  • /data/user/0/video238.sex.movie.fsh/files/BanClicked.txt
    Filesize

    5B

    MD5

    f8320b26d30ab433c5a54546d21f414c

    SHA1

    97cdbdc7feff827efb082a6b6dd2727237cd49fd

    SHA256

    60a33e6cf5151f2d52eddae9685cfa270426aa89d8dbc7dfb854606f1d1a40fe

    SHA512

    af1aace54ec0ab736f8a6a262cc319740beb89d04efe071d451522e2cdb210bf0c81ae676ebc45781935cc18a3b939a6645b2ebe0a484e2594d672d81460b3dd