Analysis
- max time kernel
19s - max time network
166s - platform
android_x64 - resource
android-x64-arm64-20240603-en - resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240603-enlocale:en-usos:android-11-x64system - submitted
03/06/2024, 15:51
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9256798103612f7ec836588abc1c0230_JaffaCakes118.apk
Resource
android-x86-arm-20240603-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
9256798103612f7ec836588abc1c0230_JaffaCakes118.apk
Resource
android-x64-20240603-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
9256798103612f7ec836588abc1c0230_JaffaCakes118.apk
Resource
android-x64-arm64-20240603-en
5 signatures
150 seconds
General
- Target 9256798103612f7ec836588abc1c0230_JaffaCakes118.apk
- Size 400KB
- Sample240603-taygnacf77
- SHA256 b2f576762b28978adee268c9f6cc52617e9fc9b2220795b8d7712f737c126ddf
- MD5 9256798103612f7ec836588abc1c0230
- SHA1 59fc55e218b634f8c9798fa0f254d11bac8c27c6
- SHA512 054d9ed8bb8251064552729947b023ac2f2f2ffff3d0c813a789b5ad24a0a92b387eb45f45e1ec27f4b06b94be9cd37fc7047b2473e7f4758da92fc112490678
- SSDEEP 12288:8o2nVikb7fmgxZomV8edssLc1jeouJ2hxhTlRfoBk:8o2nUI7+gxZXVs15e5JeDn
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo com.colorme.game.tiaoqiqq - Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo com.colorme.game.tiaoqiqq - Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.colorme.game.tiaoqiqq - Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.colorme.game.tiaoqiqq