Analysis
-
max time kernel
123s -
max time network
145s -
platform
android_x64 -
resource
android-x64-arm64-20240514-en -
resource tags
-
submitted
27-05-2024 23:07
General
-
Target
7add3ade0d55ad7a30b492d28fb49bc0_JaffaCakes118.apk
-
Size
4.6MB
-
MD5
7add3ade0d55ad7a30b492d28fb49bc0
-
SHA1
40b7ab4b6bb12939efdd091a60fea2122e9675e5
-
SHA256
0d0e4633a6606f112ff71e5f61849b08ccbd2f48eee1812df71a82fdd7cdb80e
-
SHA512
f602b8732157150e94ed162e77acb9f5b86dca75538c43a84ca4e1f5de9b74ae40683e21bbf5fd6090c8fd954fe066e5dcb9dac7aaa94b9915835ecbc9385bc5
-
SSDEEP
98304:WfyANjGmwLXljLhgVqZTkw/JWWao50gCikbg+PTK7UUIRI3H:W6AsLXljLQuowscldk3PTKEI3H
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Tries to add a device administrator. 2 TTPs 1 IoCs
-
Acquires the wake lock 1 IoCs
-
Checks if the internet connection is available 1 TTPs 1 IoCs
-
Reads information about phone network operator. 1 TTPs
Processes
-
adult.videos.play1⤵
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
- Tries to add a device administrator.
- Acquires the wake lock
- Checks if the internet connection is available
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/adult.videos.play/files/gaClientIdFilesize
36B
MD585f0fd69003cd44ce4f03b4f9326f5f9
SHA146085d60d7a26be85b9ce0e058dd2b4b15de00a5
SHA2567083646470cc41e693c78497b7c700f768d2493bf90c6ae29c87f628e0e400ea
SHA512851c4801ffea7d5154d48f8fc52b05dca7384c2455ca8171b80fcc98ef6190778d2750b3244e68a255bcb6649dc6306fe7a9ea997945cac997d81a0b889b3292