Analysis
- max time kernel
50s - max time network
131s - platform
android_x64 - resource
android-x64-20240603-en - resource tags
androidarch:x64arch:x86image:android-x64-20240603-enlocale:en-usos:android-10-x64system - submitted
04/06/2024, 23:20
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9699338180096dfcf17879ffd589df8f_JaffaCakes118.apk
Resource
android-x86-arm-20240603-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
9699338180096dfcf17879ffd589df8f_JaffaCakes118.apk
Resource
android-x64-20240603-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
9699338180096dfcf17879ffd589df8f_JaffaCakes118.apk
Resource
android-x64-arm64-20240603-en
4 signatures
150 seconds
General
- Target 9699338180096dfcf17879ffd589df8f_JaffaCakes118.apk
- Size 590KB
- Sample240604-3bp2caeg9w
- SHA256 503d0bfe9422982a8c1cc694a42dae74d9c8da797f1e4c8121693517b56edca0
- MD5 9699338180096dfcf17879ffd589df8f
- SHA1 cfda4e4dcd7e160eb350da103ce1f7463b864ec4
- SHA512 b09a9353369d6fbf30a270f36d6261e1c8f39491a4ef727404074c37cd7e8cdb4c61f9839305013779347783a158adbf79f4fbe866a401d1c78dda418e7dec3d
- SSDEEP 12288:uUbCGfRehqNfArclDgO+tcCDSDQ+0ftKOuFxjXaZ+mDdvWCZNCipe/wt/GuWh:3bCGZMqNfAYlT+trDG0fMT+wIdeCeCe9
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener mobi.eduan.App_969 - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo mobi.eduan.App_969 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone mobi.eduan.App_969 - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver mobi.eduan.App_969 - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo mobi.eduan.App_969 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo mobi.eduan.App_969
Processes
-
mobi.eduan.App_9691⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5085
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /storage/emulated/0/FlashCenter/969.swf
- Size 307KB
- SHA256 1c199214cce36982dfd0417e9a381a9bf54d3041aabacdfabf81da8abcb6934a
- MD5 a72b8f39cb7c9a1ea4ecd1d002e9ea38
- SHA1 b09ef1dee367b181de269e80248eed1dfe2efc27
- SHA512 48178adf26f8d17367b790d864950c869c0c28f262ea9c09fd616b9603c23b9db06f37e8ba3bc797fbdf8a016f361dcb935c30fec7fd04a2a6f6f49eb81424ba
- SSDEEP 6144:/vUcwCG7rRSXN7qNrzyJ+f0AApR8RlbPGdO+t7cCDSPYCQGDtD0ftKdsflMs:nUbCGfRehqNfArclDgO+tcCDSDQ+0ft5
- MD5 SHA1 SHA512 SSDEEP