Analysis
- max time kernel
20s - max time network
150s - platform
android_x64 - resource
android-x64-20240514-en - resource tags
- submitted
03/06/2024, 02:00
General
- Target 90326b413b051ee2d83a3c870db2d68b_JaffaCakes118.apk
- Size 1.4MB
- Sample240603-ce27zagf48
- SHA256 59b8c6a7877afc02b17a4331d02ef959a9fac1717d2f3a53500e08d3ac7f0db2
Score
7/10
Malware Config
Signatures
- Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
- Queries the mobile country code (MCC) 1 TTPs 1 IoCs
- Queries the phone number (MSISDN for GSM devices) 1 TTPs
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
- Acquires the wake lock 1 IoCs
- Checks if the internet connection is available 1 TTPs 1 IoCs
- Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
- Reads information about phone network operator. 1 TTPs
- Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes
-
cn.rgmmpm.jihrjt.kspvvj1⤵
- Checks memory information
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)