Analysis
- max time kernel
163s - max time network
149s - platform
android_x64 - resource
android-x64-20240514-en - resource tags
androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system - submitted
28/05/2024, 21:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7e76ec5e4997511543f692f0a3ac30ad_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
7e76ec5e4997511543f692f0a3ac30ad_JaffaCakes118.apk
Resource
android-x64-20240514-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
7e76ec5e4997511543f692f0a3ac30ad_JaffaCakes118.apk
Resource
android-x64-arm64-20240514-en
4 signatures
150 seconds
General
- Target 7e76ec5e4997511543f692f0a3ac30ad_JaffaCakes118.apk
- Size 2.4MB
- Sample240528-1bwssaec53
- SHA256 226c67ca607a0c6f4150d39dd4fe3feafedd148c7568ad31563e4278304c368f
- MD5 7e76ec5e4997511543f692f0a3ac30ad
- SHA1 1382d724c1cb96061614e075c4042810c1f12bae
- SHA512 6c8677e4de9e197e4a445919d462bd2cda1b6e069c18f03275ab5873e8286bbf15cb2029fca9a618b0479ca9a16a11d1884092ec58bc2a6d067ee27bea5c40ef
- SSDEEP 49152:ZJJPsm3C/hdS8VJz3p9sOnY9jPkR3VkCQNSoAHpqj/O:ZkmS/PS8VJNJYxEVkCQgox/O
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo io.gonative.android.joqjod - Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo io.gonative.android.joqjod - Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener io.gonative.android.joqjod - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone io.gonative.android.joqjod - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver io.gonative.android.joqjod - Reads information about phone network operator. 1 TTPs
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/io.gonative.android.joqjod/files/INSTALLATION
- Size 36B
- SHA256 a58882dd8200387b407138044798704eeb646eb22762283fa0ede447f114883a
- MD5 3915e3381586be66a1150dadf7dcb357
- SHA1 7fcf721053317b52c3e6397df78dfd76847e028f
- SHA512 171228f8cca7ad3d350444438ff5882ba01684251bfa97492290fe6ec5ed280eb5c5092ab660837b9a5dd122a24f424a503f96dcbe210eadb54fea2ff0c9d594
- MD5 SHA1 SHA512