Analysis
- max time kernel
179s - max time network
193s - platform
android_x64 - resource
android-x64-20240514-en - resource tags
androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system - submitted
01/06/2024, 09:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8a17ee51111e3e5f66821cd48d24a297_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
8a17ee51111e3e5f66821cd48d24a297_JaffaCakes118.apk
Resource
android-x64-20240514-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
8a17ee51111e3e5f66821cd48d24a297_JaffaCakes118.apk
Resource
android-x64-arm64-20240514-en
4 signatures
150 seconds
General
- Target 8a17ee51111e3e5f66821cd48d24a297_JaffaCakes118.apk
- Size 5.1MB
- Sample240601-ltqbdsaa84
- SHA256 7959a90f62809a3dc11215d0fe80487300a146da8a1e86fa41df29f061db29f6
- MD5 8a17ee51111e3e5f66821cd48d24a297
- SHA1 f72937704c17aeaa335675ae2681cd7dad4460ee
- SHA512 879bfa8dd9567e98faee3fa97a2fd8d83afb6a8f822e5e328451d968f72d274adb391e99f4c864d355c89b22c484b1e69ffb37a9077cce5fa28f3bb2fa9fd98a
- SSDEEP 98304:nKxKcab9aDyKPRvWxQNstCFLthx+knQ1JZlZZUlDwLpVPCsYrd:KxKFcDXPlDGcVtX+kcZlniDwLpAsWd
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo com.wDST_3799685 - Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo com.wDST_3799685 - Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.wDST_3799685 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.wDST_3799685 - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.wDST_3799685 - Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.wDST_3799685
Processes
-
com.wDST_37996851⤵
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
PID:5236
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.wDST_3799685/cache/volley/-15709154181947779962
- Size 1KB
- SHA256 4fe594ff165d9f404c1565b57bac9bb73b346a4e377b5d5f3df160dfe7d89b30
- MD5 7a23cac283be554264b22f2938e64f5c
- SHA1 4705ee473c5c1da91037a088adc7fc5cc276d529
- SHA512 325ae7e8bc65220f668d10027a977b6e7b6f1842c3ce7a5840e262f0fb1e9671aaf7eb8343258eee05c5fdccb8d54c7dc07b78e7e9582c99c02566c921f691db
- MD5 SHA1 SHA512
- Path /data/data/com.wDST_3799685/cache/volley/17276064751254192616
- Size 1KB
- SHA256 3fc745327a473e7be7549c19f5a91d652460e4f243a7d8ce7ca73a8112a70f33
- MD5 5b983b15f3c3fb7355ace8abe4541789
- SHA1 1c83bd9680922c51c6c3adc36ed64d115730a025
- SHA512 5052bd702f937da47fa04822fcc20478087d3b64b20708f0829f95dac32fd7235cee28882669316a4072a1ff88e6661bc5bb72489a68e629536478fb5b4f5f36
- MD5 SHA1 SHA512
- Path /data/data/com.wDST_3799685/files/webWidgetConfiguration
- Size 3KB
- SHA256 c0abe6140beaee8aa046f189c0269c86c23d985479b7474b37add6f50081faa6
- MD5 384a26a003638f4c2f0cfab0e3de9938
- SHA1 0c16ff4dc7a91200a39db1f68d1b746af7a36a02
- SHA512 1b7e905ed4af7cf3fa5d3ac322800c9be212c073e3f1bca22812adf911daeeb1ad495e9a7a6ee1f500d19f6f3eceeeda0cd4b34a4a2d222ec12cd0321d9abd6f
- MD5 SHA1 SHA512
- Path /data/data/com.wDST_3799685/files/widgetsController
- Size 835B
- SHA256 c19522c02cc05dda062ab555c01f3a032530d5a2d89e42417528a5cbd11eba46
- MD5 0bf37c98c5fb8aa1a833e53bf108055c
- SHA1 3ad44920b2f709f0571654a9d29b66fc4dd460d8
- SHA512 87e3d5b53bead82316c0b342f5abbcab5c58ce717774e45fe1482c9b76a4717b59d8073047d8d25ed29566959b377985f6cdb4c7bf823cc386afbe2632feab0a
- MD5 SHA1 SHA512