Overview
overview
8Static
static
67482557eae...18.apk
android-9-x86
87482557eae...18.apk
android-10-x64
87482557eae...18.apk
android-11-x64
8myapk.apk
android-9-x86
1appmgr.apk
android-9-x86
appmgr.apk
android-10-x64
appmgr.apk
android-11-x64
oclt.apk
android-9-x86
oclt.apk
android-10-x64
oclt.apk
android-11-x64
pe.apk
android-9-x86
pe.apk
android-10-x64
pe.apk
android-11-x64
rt.apk
android-9-x86
rt.apk
android-10-x64
rt.apk
android-11-x64
rt1.apk
android-9-x86
rt1.apk
android-10-x64
rt1.apk
android-11-x64
rt_server.apk
android-9-x86
rt_server.apk
android-10-x64
rt_server.apk
android-11-x64
Analysis
- max time kernel
179s - max time network
150s - platform
android_x64 - resource
android-x64-20240514-en - resource tags
androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system - submitted
26/05/2024, 05:48
Static task
static1
Behavioral task
behavioral1
Sample
7482557eae0ec90d23c17ce7e5e795ae_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
7482557eae0ec90d23c17ce7e5e795ae_JaffaCakes118.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral3
Sample
7482557eae0ec90d23c17ce7e5e795ae_JaffaCakes118.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral4
Sample
myapk.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral5
Sample
appmgr.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral6
Sample
appmgr.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral7
Sample
appmgr.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral8
Sample
oclt.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral9
Sample
oclt.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral10
Sample
oclt.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral11
Sample
pe.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral12
Sample
pe.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral13
Sample
pe.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral14
Sample
rt.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral15
Sample
rt.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral16
Sample
rt.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral17
Sample
rt1.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral18
Sample
rt1.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral19
Sample
rt1.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral20
Sample
rt_server.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral21
Sample
rt_server.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral22
Sample
rt_server.apk
Resource
android-x64-arm64-20240514-en
General
- Target 7482557eae0ec90d23c17ce7e5e795ae_JaffaCakes118.apk
- Size 10.1MB
- Sample240526-ghrmvsha4w
- SHA256 510e3e0db740fce0d66aad00b8bd28d139be223a8ca746cbd7d1a575fc566505
- MD5 7482557eae0ec90d23c17ce7e5e795ae
- SHA1 b15e92c8321da74286228690e06d7425d1c05372
- SHA512 ba2704fd319373ea142ba25691ff36a21dcafe5379ff2edab86db69fbd4337176d6bf73efeb1501d2aebcdd5e43a311afccdde4b8820e055c45f096538878806
- SSDEEP 196608:6V4wgFmm1CnMkSEAhZfLZidbARIkmVFRIT1RTvoWqu8Apc2b:Lr4m1CMZfUdbgIkkSQWTy2b
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo com.app.attacker.yfikociztbfazgdjefwj - Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo com.app.attacker.yfikociztbfazgdjefwj - Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.app.attacker.yfikociztbfazgdjefwj - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.app.attacker.yfikociztbfazgdjefwj - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.app.attacker.yfikociztbfazgdjefwj - Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.app.attacker.yfikociztbfazgdjefwj - Reads information about phone network operator. 1 TTPs
Processes
-
com.app.attacker.yfikociztbfazgdjefwj1⤵
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
PID:5139
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.app.attacker.yfikociztbfazgdjefwj/files/Roboto-Regular.ttf
- Size 112KB
- SHA256 00ae3fd7698bec219473edf68171a0f14e6cf68d363eea59373156e0b090de11
- MD5 230e0e1a8b7a17d5f3f03de75adea5a2
- SHA1 42dd3daecfa9192c08fee4bbd3bea78b14dd6e62
- SHA512 1fedc2e66c80fde9e093e032e571883221ea57a4e24ded7aba83d11d42c8709128ac98bd6f1f61d0d8bdd3a5b6af6c7cbd45dd1b849075fbf44515de0e586826
- SSDEEP 3072:PnTHErpAMMVGCqFy+RbHN6xss5lBvsssssskNP:PrnVEFr6xss5lBvssssssaP
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.app.attacker.yfikociztbfazgdjefwj/files/close_button.png
- Size 1KB
- SHA256 17e1977137c8d19334573c7add2e7ab505ef55e08b5c9e6e8714bd8ad75735a9
- MD5 6d79997d240bf8146886e4bc63f31db3
- SHA1 6e033e83a010d249d6e24b9ea8798cfe99b6d778
- SHA512 95f5b92fba0fbb344526a588ea4c16356fd149b84ca5e5c45e3c982d11a7f430d07fdbc181b084d0281c91eec36c0a59207c7bb0157ec7615ab0d682582a01ef
- MD5 SHA1 SHA512
- Path /data/data/com.app.attacker.yfikociztbfazgdjefwj/files/drawable-mdpi.zip
- Size 7KB
- SHA256 592c853a39f81ac00c92acd48a8cf0120b47101d7ab7b5a33f523869ade8dee2
- MD5 1ce2bae53e83006c65257cd205fbefa7
- SHA1 dcc5a869f0a13c01a1f76527356933218d7fc5ec
- SHA512 534ce1fb933d9b389fdbc8ec372aa67bd549da47441a0d93c8d62a190319b85ebc279dc2027379e38a1944b851d548730d26084cc063208e0802ac6cca17f9b0
- SSDEEP 96:cSilZTl2n+9+mRiQwaCgkGVe4loy7F5z7hpbkGrmlIvGodUlJaU7bgfhZd5I+y:JEZ++9+moQhCgkBi77wHoUaU7L+y
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.app.attacker.yfikociztbfazgdjefwj/files/drawable.zip
- Size 11KB
- SHA256 9313e65192a108ab22d94239028c5caf4e4e7efb8c1072c0b985f679c7cb82fc
- MD5 55c53d457904480c917ae919026e5919
- SHA1 5206401071ae506ed8a730ddad2eea8ea6d45eef
- SHA512 8573e6dd4c697e107defb6c98cffef4e6774b420b5fe94695bcd31ba1aafb3914ea68c20b957edc984fa742272fc5bbb497506a7e91ec59f665a2d27aef0324f
- SSDEEP 192:+3y/SS3PSDFhz1ZaqIeNkVPCEh8vndeUd2nnYimSDFhz1ZaqIeNtVPCEh8vndeU8:+97hVt2VPCEIdeY2nn3JhVtTVPCEIdeH
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.app.attacker.yfikociztbfazgdjefwj/files/empty_star.png
- Size 1KB
- SHA256 d3159015a641eaa8524d530f4e35fdcc19a8bfa2679c7d25c4247c262babdc4e
- MD5 73aa466d5176127dcf290f2727eda17a
- SHA1 8cbaf9e3ea1f60a11a468a4faf6b183f53f84a25
- SHA512 372a82391121911561e2938095c414b0a156c3c4bc2f30ff3f6b5515172231daf6d699edd2710165f22d324e4419be9f0c55682e53d1d8c9bf013524a092ba82
- MD5 SHA1 SHA512
- Path /data/data/com.app.attacker.yfikociztbfazgdjefwj/files/filled_star.png
- Size 1KB
- SHA256 deea08857a7c4db40ce82f2d129660fc0d4f0537cf8effc8e54b8fb6d07dab6f
- MD5 685f9e06c0990c57fd21bcfe47ce706d
- SHA1 6c15fd6142f6e2d081377abbb07e302261859871
- SHA512 f4356a940e3ee404ed6895374090bc2cbbb226b49b84ad17dac0a26a42e0e7479c43989c09dc17fd0da2192f2fbb08833b3b46ee561b7dc0047363a49cc4d662
- MD5 SHA1 SHA512
- Path /data/data/com.app.attacker.yfikociztbfazgdjefwj/files/half_star.png
- Size 1KB
- SHA256 c7e35b796c71ec2b3b2713961a0777a09e261f8056d304550addf39c638f44b8
- MD5 b1657a6b1b87d76617fd7db36dcfaa82
- SHA1 65bd6dc7c7abb02ae7c5650e65e544d8e060e27a
- SHA512 d1dd09840103e98531105b428e374672531ac9d33a652fcd091aa94d38a8699a6e99ac5822e67b293e68513307b28e986412a1a84d55d73791c9be95fe1fc18e
- MD5 SHA1 SHA512
- Path /data/data/com.app.attacker.yfikociztbfazgdjefwj/files/info_ex_s.png
- Size 3KB
- SHA256 0abf37985d6e83fd45f6f9f854c3d8e2fd0063f71933f1bc07772a9d54e561e8
- MD5 f8e42efc5fb6d75ab8e928822c83b535
- SHA1 bb2535f79e03481a594ede3acdf1d956fd94b3cb
- SHA512 9102e9551f335e7e843932b44274ede4b0f2212a3bd8b0dc509083456799582067966cc70d4694c9c18e369f6863e93ad0f513f938c029ea60be7ce73e8385cc
- MD5 SHA1 SHA512
- Path /data/data/com.app.attacker.yfikociztbfazgdjefwj/files/info_s.png
- Size 1KB
- SHA256 97b5a55d551a037126c25cd939d369881e597ff181072f3e251b7cc739e74354
- MD5 2aa3e72c2f48b2297c27f997c06f5de1
- SHA1 e02b540bcbe25cf6a16e2e9108ddb1be745476bc
- SHA512 6cbb2ede58606085a3bf07d78aa7e299ba431c5090e258a6cfc798d1fd178a458483b135f8066854b4a7dc2012d83b437779efa81d163c1b0ded00ddc75c9f60
- MD5 SHA1 SHA512
- Path /data/data/com.app.attacker.yfikociztbfazgdjefwj/files/logo.png
- Size 1KB
- SHA256 a7a8e02e7756d0ff57848337b8bc63b6af1b041183fa2ca13f6b1795d9623cd1
- MD5 33104d50635ccc592a0dcdae61f7c32f
- SHA1 27b4d0db908f5a5af7d5256fadd24d90a80cbab1
- SHA512 ebd4cd3fddbb574a8abe3d6545849323826e9e323fc1b145ce0711e744d8ee74622605a13e2b77e5c2cdf636555244d83506113c389708d2826190edfa3463b6
- MD5 SHA1 SHA512
- Path /data/data/com.app.attacker.yfikociztbfazgdjefwj/files/resources.zip
- Size 56KB
- SHA256 0ee5fb3e1c0cc82b3be0a9d85e21ab645eaac20a1bc0c63b3c61dc2db2fbb969
- MD5 3cd55f6a8acbfd7a2a837f7ef56fef55
- SHA1 fa7307e7ce4dc0e0fb2587a65b1959877a4e65d9
- SHA512 6071cfedbcb0bf2b0df8629b6d78115bc855491b3dd920e7a9cfaa8fd674be23f7eb275ad1f43d3d97a348f7ca844d4863a98ff3755d9cc52eac3eda4e7b3d1f
- SSDEEP 768:Tb++7AlfezPttbbWC3cL8pH8TXyNcLVQxXVjmrts6ftfrSGQxWAm9BDBLOC:TbYfotlD3h8TXJSJVQtswpGHm9BDBp
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.app.attacker.yfikociztbfazgdjefwj/files/tab_side.png
- Size 2KB
- SHA256 6148d3dc89c461a0147a9c4de14caa2a2ad1d36ccce75936433c9736c9eb2996
- MD5 7d68d6523a1257de1310bfb7b66cb3d6
- SHA1 1a35d821fc51bd627626cfa10d256d647acb88b4
- SHA512 861fda4b4e55d3b6f3158845e64d14453d7ecbeb375070c08920fa0a8a55f32c2ba86b626f02a461f90b4f7cc28b56ddcceef064bf0cdb7096d84017bc40b6e3
- MD5 SHA1 SHA512